CVE-2023-30588

score

<0.1

cvss

5.3

epss

1.2%

published

2023-11-28

kev added

—

first seen

2026-10-21

Node.js v16, v18, and v20 contain a denial of service caused by non-expected termination when creating an x509 certificate with an invalid public key using crypto.X509Certificate(), letting attackers cause application interruptions, exploit requires attacker to supply invalid public keys.