← Back

Node Openssl

node-openssl

Vendor: Node Openssl Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-49210
1Node Openssl Project
1Node Openssl
Jun 17, 2026
Nov 23, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, and accepts an opts argument that contains a verb field (used for command execution)....Show more
The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, and accepts an opts argument that contains a verb field (used for command execution). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.Show less
CVE-2017-16064
1Node Openssl Project
1Node Openssl
Nov 21, 2024
Jun 7, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.