Staging Environment: Content and features may be unstable or change without notice.

Extra Mitigation Curation

ubuntu_osv/UBUNTU-CVE-2025-23166

Progress 0 / 0

Advisory Summary

ubuntu_osv/UBUNTU-CVE-2025-23166

The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
Mitigation Type Mitigation Data Mitigation Note