onyx --cves cve-2022-35255
CVE-2022-35255
- score
- <0.1
- cvss
- 9.1
- epss
- 2.1%
- published
- 2022-12-05
- kev added
- —
- first seen
Node.js 18 contains a weak randomness in WebCrypto keygen caused by unverified and potentially non-cryptographically secure entropy source in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc, letting attackers generate weak cryptographic keys, exploit requires attacker to influence or observe entropy source.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC
Exploit availability
Public PoC flagged by vulnx; no direct exploit link among the citations.