DeutschShown in its original language — a full translation is planned for a future version.
Node.js: Mehrere Schwachstellen
view advisory published 2025-07-15
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um Sicherheitsvorkehrungen zu umgehen und um einen Denial-of-Service-Zustand zu verursachen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-27210US | — | Exploit | ||
An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX.
This vulnerability affects Windows user… | ||||
| CVE-2025-27209US | — | — | ||
The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation re-introduces the HashDoS vulnerability as an attacker who ca… | ||||
02
references
External citations — patches, advisories, analysis.
- Splunk Security Advisory SVD-2026-0211 vom 2026-02-18external
- Node.js Security Releases vom 2025-07-15external
- HCL Security Advisory vom 2025-10-11external
- WID-SEC-W-2025-1578 - CSAF Versionself
- WID-SEC-2025-1578 - Portal Versionself
- PoC CVE-2025-27210 vom 2025-07-15external
- IBM Security Bulletin 7244612 vom 2025-09-11external
- IBM Security Bulletin 7246663 vom 2025-09-30external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan