Vendor/product archive

node-openssl_project / node-openssl CVEs

Beta · best-effort

2 CVEs tagged to node-openssl_project / node-openssl — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to node-openssl_project vendor archive

CVE-2023-49210

Published Nov 23, 2023

The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, and accepts an opts argument that contains a…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2017-16064

Published Jun 7, 2018

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1