UpHeron
All vulnerabilities

Servers and applications

CVE-2025-55131

Timeout-based race conditions make Uint8Array/Buffer.alloc non-zerofilled

Severity
High
Published
13 Jan 2026
Last changed
13 Jan 2026
Added to UpHeron
22 Oct 2026
Fixed in
20.20.0, 22.22.0, 24.13.0, 25.3.0
Sources
nodejs

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 20.0.0 before 20.20.0
  • From 22.0.0 before 22.22.0
  • From 24.0.0 before 24.13.0
  • From 25.0.0 before 25.3.0

References