Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freeing the allocated buffer. When applications call `socket.getPeerCertificate(true)`, each certificate field leaks memory, allowing remote clients to trigger steady memory growth through repeated TLS connections. Over time this can lead to resource exhaustion and denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Heads up, #openSUSE Tumbleweed community! A new security advisory (2026-10311-1) is out for Corepack and Node.js 24, addressing CVE-2025-59464. Read more: 👉 https://tinyurl.com/9m9732ru #Security https://t.co/j5mQr4tgPi
Post summary
An openSUSE Tumbleweed advisory (2026-10311-1) has been released to address CVE-2025-59464 for Corepack and Node.js 24.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nodejs | node.js | - | - | - |