Node.js: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• High 7.7
  CVE-2025-23083

  With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This …

  Node.js node nodejs openjdk17 Debian Azure Linux Alpine Wolfi
  Jan 22, 2025
• Medium 6.8
  CVE-2025-22150

  Undici Uses Insufficiently Random Values

  Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and 7.2.3, undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if s…

  Node.js undici nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi npm
  Jan 21, 2025
• Medium 5.6
  CVE-2025-23084

  A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows envir…

  Node.js node nodejs nodejs-16 Alpine Wolfi
  Jan 28, 2025
• Medium 5.3
  CVE-2025-23085

  A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Addition…

  Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 7, 2025
• Unscored —
  CVE-2025-23087 Rejected

  This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment f…

  Jan 22, 2025
• Unscored —
  CVE-2025-23088 Rejected

  This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment f…

  Jan 22, 2025
• Unscored —
  CVE-2025-23089 Rejected

  This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment f…

  nodejs-21 Wolfi
  Jan 22, 2025

Revision history

1. 2026-09-28 #29

   Neue Updates von SUSE aufgenommen

2. 2026-09-20 #28

   Neue Updates von SUSE aufgenommen

3. 2026-09-17 #27

   Neue Updates von SUSE aufgenommen

4. 2026-09-09 #26

   Neue Updates von SUSE aufgenommen

5. 2026-05-14 #25

   Neue Updates von Debian aufgenommen

6. 2026-03-17 #24

   Neue Updates von Debian aufgenommen

7. 2025-11-13 #23

   Neue Updates von Red Hat aufgenommen

8. 2025-10-12 #22

   Neue Updates von HCL aufgenommen

9. 2025-10-01 #21

   Neue Updates von Red Hat aufgenommen

10. 2025-09-10 #20

    Neue Updates von IBM aufgenommen

11. 2025-07-28 #19

    Neue Updates von Oracle Linux aufgenommen

12. 2025-06-12 #18

    Neue Updates von Gentoo aufgenommen

13. 2025-06-04 #17

    Neue Updates von Oracle Linux aufgenommen

14. 2025-06-02 #16

    Neue Updates von XEROX aufgenommen

15. 2025-05-25 #15

    Neue Updates von Oracle Linux aufgenommen

16. 2025-03-26 #14

    Neue Updates von IBM aufgenommen

17. 2025-03-12 #13

    Neue Updates von IBM aufgenommen

18. 2025-02-26 #12

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

19. 2025-02-25 #11

    Neue Updates von Debian aufgenommen

20. 2025-02-19 #10

    Neue Updates von Oracle Linux aufgenommen

21. 2025-02-18 #9

    Neue Updates von Oracle Linux aufgenommen

22. 2025-02-17 #8

    Neue Updates von Red Hat aufgenommen

23. 2025-02-16 #7

    Neue Updates von Red Hat und Oracle Linux aufgenommen

24. 2025-02-13 #6

    Neue Updates von Rocky Enterprise Software Foundation, Red Hat und Oracle Linux aufgenommen

25. 2025-02-12 #5

    Neue Updates von Red Hat aufgenommen

References

• Node.js Security Releases vom 2025-01-21
  https://nodejs.org/en/blog/vulnerability/january-2025-security-releases
• Fedora Security Advisory FEDORA-2025-8E0ECB9BB6 vom 2025-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-8e0ecb9bb6
• Fedora Security Advisory FEDORA-2025-E330D34ECC vom 2025-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-e330d34ecc
• Fedora Security Advisory FEDORA-2025-87A8AF2834 vom 2025-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-87a8af2834
• Fedora Security Advisory FEDORA-2025-54958FF9E2 vom 2025-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-54958ff9e2
• Fedora Security Advisory FEDORA-2025-76FC32D433 vom 2025-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-76fc32d433
• Fedora Security Advisory FEDORA-2025-CC8F9D8943 vom 2025-01-24
  https://bodhi.fedoraproject.org/updates/FEDORA-2025-cc8f9d8943
• SUSE Security Update SUSE-SU-2025:0234-1 vom 2025-01-24
  https://lists.suse.com/pipermail/sle-security-updates/2025-January/020199.html
• SUSE Security Update SUSE-SU-2025:0232-1 vom 2025-01-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/EAA5VVUZ2Z26CMX7SWWG3KZWFXWZOLOI/
• SUSE Security Update SUSE-SU-2025:0233-1 vom 2025-01-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/5MXRI7LITQSHGS7TS5FVZS5J5SFQEZOC/
• SUSE Security Update SUSE-SU-2025:0237-1 vom 2025-01-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/4GHLFJIFCCY7T6727ECCVQVUTXPGIN56/
• openSUSE Security Update OPENSUSE-SU-2025:14706-1 vom 2025-01-29
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/WLMBUS6KTOM5ZRBZUFNAWPANSHPLYG3W/
• SUSE Security Update SUSE-SU-2025:0284-1 vom 2025-01-29
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/3E7XMAZSXTVJEOSNVU4GOEGWDOPIAF4W/
• Red Hat Security Advisory RHSA-2025:1351 vom 2025-02-12
  https://access.redhat.com/errata/RHSA-2025:1351
• Rocky Linux Security Advisory RLSA-2025:1443 vom 2025-02-13
  https://errata.build.resf.org/RLSA-2025:1443
• Red Hat Security Advisory RHSA-2025:1446 vom 2025-02-13
  https://access.redhat.com/errata/RHSA-2025:1446
• Red Hat Security Advisory RHSA-2025:1443 vom 2025-02-13
  https://access.redhat.com/errata/RHSA-2025:1443
• Oracle Linux Security Advisory ELSA-2025-1351 vom 2025-02-14
  https://linux.oracle.com/errata/ELSA-2025-1351.html
• Rocky Linux Security Advisory RLSA-2025:1446 vom 2025-02-13
  https://errata.build.resf.org/RLSA-2025:1446
• Red Hat Security Advisory RHSA-2025:1454 vom 2025-02-13
  https://access.redhat.com/errata/RHSA-2025:1454
• Red Hat Security Advisory RHSA-2025:1522 vom 2025-02-17
  https://access.redhat.com/errata/RHSA-2025:1522
• Oracle Linux Security Advisory ELSA-2025-1443 vom 2025-02-14
  https://linux.oracle.com/errata/ELSA-2025-1443.html
• Oracle Linux Security Advisory ELSA-2025-1446 vom 2025-02-14
  https://linux.oracle.com/errata/ELSA-2025-1446.html
• Red Hat Security Advisory RHSA-2025:1611 vom 2025-02-17
  https://access.redhat.com/errata/RHSA-2025:1611
• Red Hat Security Advisory RHSA-2025:1582 vom 2025-02-17
  https://access.redhat.com/errata/RHSA-2025:1582
• Red Hat Security Advisory RHSA-2025:1613 vom 2025-02-17
  https://access.redhat.com/errata/RHSA-2025:1613
• Oracle Linux Security Advisory ELSA-2025-1582 vom 2025-02-19
  https://linux.oracle.com/errata/ELSA-2025-1582.html
• Oracle Linux Security Advisory ELSA-2025-1611 vom 2025-02-19
  https://linux.oracle.com/errata/ELSA-2025-1611.html
• Oracle Linux Security Advisory ELSA-2025-1613 vom 2025-02-19
  https://linux.oracle.com/errata/ELSA-2025-1613.html
• Debian Security Advisory DLA-4067 vom 2025-02-25
  https://lists.debian.org/debian-lts-announce/2025/02/msg00031.html
• Rocky Linux Security Advisory RLSA-2025:1613 vom 2025-02-26
  https://errata.build.resf.org/RLSA-2025:1613
• Rocky Linux Security Advisory RLSA-2025:1582 vom 2025-02-26
  https://errata.build.resf.org/RLSA-2025:1582
• Rocky Linux Security Advisory RLSA-2025:1611 vom 2025-02-26
  https://errata.build.resf.org/RLSA-2025:1611
• IBM Security Bulletin 7185575 vom 2025-03-12
  https://www.ibm.com/support/pages/node/7185575
• IBM Security Bulletin 7229110 vom 2025-03-26
  https://www.ibm.com/support/pages/node/7229110
• Oracle Linux Security Advisory ELSA-2025-7433 vom 2025-05-23
  https://linux.oracle.com/errata/ELSA-2025-7433.html
• XEROX Security Advisory XRX25-012 vom 2025-06-02
  https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf
• Oracle Linux Security Advisory ELSA-2025-8506 vom 2025-06-05
  https://linux.oracle.com/errata/ELSA-2025-8506.html
• Gentoo Linux Security Advisory GLSA-202506-08 vom 2025-06-12
  https://security.gentoo.org/glsa/202506-08
• Oracle Linux Security Advisory ELSA-2025-11803 vom 2025-07-28
  https://linux.oracle.com/errata/ELSA-2025-11803.html
• IBM Security Bulletin 7244612 vom 2025-09-11
  https://www.ibm.com/support/pages/node/7244612
• Red Hat Security Advisory RHSA-2025:17145 vom 2025-10-01
  https://access.redhat.com/errata/RHSA-2025:17145
• HCL Security Advisory vom 2025-10-11
  https://support.hcl-software.com/community?id=community_blog&sys_id=7e13ad453becfa94cb0155f726e45a99
• Red Hat Security Advisory RHSA-2025:21368 vom 2025-11-13
  https://access.redhat.com/errata/RHSA-2025:21368
• Debian Security Advisory DSA-6166 vom 2026-03-17
  https://lists.debian.org/debian-security-announce/2026/msg00075.html
• Debian Security Advisory DSA-6272 vom 2026-05-15
  https://lists.debian.org/debian-security-announce/2026/msg00183.html
• SUSE Security Update SUSE-SU-2026:3930-1 vom 2026-09-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/028803.html
• SUSE Security Update SUSE-SU-2026:3929-1 vom 2026-09-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/028804.html
• SUSE Security Update SUSE-SU-2026:4248-1 vom 2026-09-17
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029224.html
• SUSE Security Update SUSE-SU-2026:4261-1 vom 2026-09-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029230.html
• SUSE Security Update SUSE-SU-2026:4355-1 vom 2026-09-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/029417.html