UpHeron
All vulnerabilities

Servers and applications

CVE-2023-30590

The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generates a private key if none has been set yet, but the function is also needed to compute the corresponding public key after calling setPrivateKey(). However, the documentation says this API call: "Generates private and public Diffie-Hellman key values". The…

Severity
High 7.5
Published
28 Nov 2023
Last changed
8 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
16.20.1, 18.16.1, 20.3.1
Sources
NVD

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 16.0.0 before 16.20.1
  • From 18.0.0 before 18.16.1
  • From 20.0.0 before 20.3.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-30590
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-30590