[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-35255":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":30,"duplicate_of":9,"upstream":31,"downstream":32,"duplicates":59,"related":60,"reserved_at":9,"published_at":68,"modified_at":69,"state":70,"summary":71,"references_raw":79,"kevs":100,"epss":101,"epss_history":104,"metrics":367,"affected":375},"CVE-2022-35255","A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. There are two problems with this: 1) It does not check the return value, it assumes EntropySource() always succeeds, but it can (and sometimes will) fail. 2) The random data returned byEntropySource() may not be cryptographically strong and therefore not suitable as keying material.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-338","Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)","The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.","weakness","Draft","Base","Medium",[],[21],{"_key":22,"name":23,"source":24,"url":25,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":29,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_CB998B8FE4D982CA","Exploit Reference (hackerone.com)","reference","https://hackerone.com/reports/1690000","unknown",0.2,false,[],[],[],[33,35,37,39,41,43,45,47,49,51,53,55,57],{"_key":34},"ALPINE-CVE-2022-35255",{"_key":36},"RHSA-2022:6963",{"_key":38},"RHSA-2022:6964",{"_key":40},"RHSA-2022:7821",{"_key":42},"SUSE-SU-2022:3524-1",{"_key":44},"SUSE-SU-2023:0408-1",{"_key":46},"SUSE-SU-2022:3615-1",{"_key":48},"SUSE-SU-2022:3656-1",{"_key":50},"SUSE-SU-2023:0419-1",{"_key":52},"OPENSUSE-SU-2024:12370-1",{"_key":54},"OPENSUSE-SU-2024:12376-1",{"_key":56},"DSA-5326-1",{"_key":58},"DEBIAN-CVE-2022-35255",[],[61,62,63,64,65,66,67],{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":52},{"_key":54},"2022-12-05T00:00:00.000Z","2025-04-30T05:48:45.486Z","Modified",{"cisa_kev":28,"cisa_ransomware":28,"cisa_vendor":9,"epss_severity":72,"epss_score":73,"severity":74,"severity_score":75,"severity_version":76,"severity_source":77,"severity_vector":78,"severity_status":70},"low",0.01213,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",[80,87,91,95],{"url":25,"sources":81,"tags":83},[77,82],"nvd",[84,85,86],"Exploit","Issue Tracking","Third Party Advisory",{"url":88,"sources":89,"tags":90},"https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf",[77,82],[86],{"url":92,"sources":93,"tags":94},"https://security.netapp.com/advisory/ntap-20230113-0002/",[77,82],[86],{"url":96,"sources":97,"tags":98},"https://www.debian.org/security/2023/dsa-5326",[77,82],[99,86],"Vendor Advisory",[],{"date":102,"score":73,"percentile":103},"2026-06-04",0.79328,[105,109,112,115,118,121,124,127,130,133,136,139,142,145,148,152,155,158,161,164,167,170,173,176,179,181,184,186,190,193,195,198,201,204,207,210,213,216,219,222,225,227,229,232,235,238,241,244,247,250,254,257,260,262,265,268,271,274,277,281,284,286,289,292,295,298,301,304,306,309,311,314,317,319,322,325,328,330,333,336,339,342,345,348,350,353,356,359,362,364],{"date":106,"score":107,"percentile":108},"2025-11-04",0.01389,0.7971,{"date":110,"score":107,"percentile":111},"2025-11-05",0.79713,{"date":113,"score":107,"percentile":114},"2025-11-06",0.79716,{"date":116,"score":107,"percentile":117},"2025-11-07",0.79728,{"date":119,"score":107,"percentile":120},"2025-11-08",0.79734,{"date":122,"score":107,"percentile":123},"2025-11-09",0.79731,{"date":125,"score":107,"percentile":126},"2025-11-10",0.79721,{"date":128,"score":107,"percentile":129},"2025-11-11",0.79726,{"date":131,"score":107,"percentile":132},"2025-11-12",0.79742,{"date":134,"score":107,"percentile":135},"2025-11-13",0.7975,{"date":137,"score":107,"percentile":138},"2025-11-14",0.79755,{"date":140,"score":107,"percentile":141},"2025-11-15",0.79753,{"date":143,"score":107,"percentile":144},"2025-11-16",0.79752,{"date":146,"score":107,"percentile":147},"2025-11-17",0.79749,{"date":149,"score":150,"percentile":151},"2025-11-18",0.00997,0.75001,{"date":153,"score":150,"percentile":154},"2025-11-19",0.75007,{"date":156,"score":150,"percentile":157},"2025-11-20",0.75016,{"date":159,"score":107,"percentile":160},"2025-11-21",0.79768,{"date":162,"score":107,"percentile":163},"2025-11-22",0.79772,{"date":165,"score":107,"percentile":166},"2025-11-23",0.79764,{"date":168,"score":107,"percentile":169},"2025-11-24",0.79765,{"date":171,"score":107,"percentile":172},"2025-11-25",0.79766,{"date":174,"score":107,"percentile":175},"2025-11-26",0.79769,{"date":177,"score":107,"percentile":178},"2025-11-27",0.79773,{"date":180,"score":107,"percentile":172},"2025-11-28",{"date":182,"score":107,"percentile":183},"2025-11-29",0.7977,{"date":185,"score":107,"percentile":160},"2025-11-30",{"date":187,"score":188,"percentile":189},"2025-12-01",0.00844,0.74139,{"date":191,"score":188,"percentile":192},"2025-12-02",0.74146,{"date":194,"score":188,"percentile":192},"2025-12-03",{"date":196,"score":107,"percentile":197},"2025-12-04",0.79771,{"date":199,"score":107,"percentile":200},"2025-12-05",0.79776,{"date":202,"score":107,"percentile":203},"2025-12-06",0.79778,{"date":205,"score":107,"percentile":206},"2025-12-07",0.7978,{"date":208,"score":107,"percentile":209},"2025-12-08",0.79785,{"date":211,"score":107,"percentile":212},"2025-12-09",0.79799,{"date":214,"score":107,"percentile":215},"2025-12-10",0.79823,{"date":217,"score":107,"percentile":218},"2025-12-11",0.79835,{"date":220,"score":107,"percentile":221},"2025-12-12",0.79854,{"date":223,"score":107,"percentile":224},"2025-12-13",0.79856,{"date":226,"score":107,"percentile":224},"2025-12-14",{"date":228,"score":107,"percentile":221},"2025-12-15",{"date":230,"score":107,"percentile":231},"2025-12-16",0.79863,{"date":233,"score":107,"percentile":234},"2025-12-17",0.79872,{"date":236,"score":107,"percentile":237},"2025-12-18",0.7989,{"date":239,"score":107,"percentile":240},"2025-12-19",0.79899,{"date":242,"score":107,"percentile":243},"2025-12-20",0.79893,{"date":245,"score":107,"percentile":246},"2025-12-21",0.79886,{"date":248,"score":107,"percentile":249},"2025-12-22",0.79887,{"date":251,"score":252,"percentile":253},"2025-12-23",0.0161,0.81302,{"date":255,"score":252,"percentile":256},"2025-12-24",0.81315,{"date":258,"score":252,"percentile":259},"2025-12-25",0.81331,{"date":261,"score":252,"percentile":259},"2025-12-26",{"date":263,"score":252,"percentile":264},"2025-12-27",0.81366,{"date":266,"score":252,"percentile":267},"2025-12-28",0.81317,{"date":269,"score":252,"percentile":270},"2025-12-29",0.81313,{"date":272,"score":252,"percentile":273},"2025-12-30",0.81319,{"date":275,"score":252,"percentile":276},"2025-12-31",0.81333,{"date":278,"score":279,"percentile":280},"2026-01-01",0.00979,0.76362,{"date":282,"score":279,"percentile":283},"2026-01-02",0.76366,{"date":285,"score":279,"percentile":283},"2026-01-03",{"date":287,"score":252,"percentile":288},"2026-01-04",0.81312,{"date":290,"score":252,"percentile":291},"2026-01-05",0.81305,{"date":293,"score":252,"percentile":294},"2026-01-06",0.81309,{"date":296,"score":252,"percentile":297},"2026-01-07",0.81311,{"date":299,"score":252,"percentile":300},"2026-01-08",0.81321,{"date":302,"score":252,"percentile":303},"2026-01-09",0.81323,{"date":305,"score":252,"percentile":303},"2026-01-10",{"date":307,"score":252,"percentile":308},"2026-01-11",0.81316,{"date":310,"score":252,"percentile":294},"2026-01-12",{"date":312,"score":252,"percentile":313},"2026-01-13",0.81306,{"date":315,"score":252,"percentile":316},"2026-01-14",0.81329,{"date":318,"score":252,"percentile":259},"2026-01-15",{"date":320,"score":252,"percentile":321},"2026-01-16",0.81341,{"date":323,"score":252,"percentile":324},"2026-01-17",0.81347,{"date":326,"score":252,"percentile":327},"2026-01-18",0.81339,{"date":329,"score":252,"percentile":276},"2026-01-19",{"date":331,"score":252,"percentile":332},"2026-01-20",0.81335,{"date":334,"score":252,"percentile":335},"2026-01-21",0.81342,{"date":337,"score":252,"percentile":338},"2026-01-22",0.8135,{"date":340,"score":252,"percentile":341},"2026-01-23",0.81375,{"date":343,"score":252,"percentile":344},"2026-01-24",0.81382,{"date":346,"score":252,"percentile":347},"2026-01-25",0.81379,{"date":349,"score":252,"percentile":347},"2026-01-26",{"date":351,"score":252,"percentile":352},"2026-01-27",0.81378,{"date":354,"score":252,"percentile":355},"2026-01-28",0.81376,{"date":357,"score":252,"percentile":358},"2026-01-29",0.81373,{"date":360,"score":252,"percentile":361},"2026-01-30",0.81374,{"date":363,"score":252,"percentile":347},"2026-01-31",{"date":365,"score":279,"percentile":366},"2026-02-01",0.76442,[368,373],{"source":77,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":369,"cvss_v4_0":9},{"baseScore":75,"baseSeverity":370,"vectorString":78,"impactScore":371,"exploitabilityScore":372},"CRITICAL",8.7,10,{"source":82,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":374,"cvss_v4_0":9},{"baseScore":75,"baseSeverity":370,"vectorString":78,"impactScore":371,"exploitabilityScore":372},[376,385,444,462],{"ecosystem":9,"name":377,"vendor":378,"product":379,"cpe_part":380,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":381},"debian linux","debian","debian_linux","o",[382],{"version":383,"is_range":28,"range_type":384,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0","cpe",{"ecosystem":9,"name":386,"vendor":387,"product":386,"cpe_part":388,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":389},"node","nodejs","a",[390,397,401,405,409,413,417,421,424,428,432,436,440],{"version":391,"is_range":392,"range_type":77,"version_start":393,"version_start_type":394,"version_end":395,"version_end_type":396,"fixed_in":9},">= 4.0, \u003C 4.*",true,"4.0","including","4.*","excluding",{"version":398,"is_range":392,"range_type":77,"version_start":399,"version_start_type":394,"version_end":400,"version_end_type":396,"fixed_in":9},">= 5.0, \u003C 5.*","5.0","5.*",{"version":402,"is_range":392,"range_type":77,"version_start":403,"version_start_type":394,"version_end":404,"version_end_type":396,"fixed_in":9},">= 6.0, \u003C 6.*","6.0","6.*",{"version":406,"is_range":392,"range_type":77,"version_start":407,"version_start_type":394,"version_end":408,"version_end_type":396,"fixed_in":9},">= 7.0, \u003C 7.*","7.0","7.*",{"version":410,"is_range":392,"range_type":77,"version_start":411,"version_start_type":394,"version_end":412,"version_end_type":396,"fixed_in":9},">= 8.0, \u003C 8.*","8.0","8.*",{"version":414,"is_range":392,"range_type":77,"version_start":415,"version_start_type":394,"version_end":416,"version_end_type":396,"fixed_in":9},">= 9.0, \u003C 9.*","9.0","9.*",{"version":418,"is_range":392,"range_type":77,"version_start":419,"version_start_type":394,"version_end":420,"version_end_type":396,"fixed_in":9},">= 10.0, \u003C 10.*","10.0","10.*",{"version":422,"is_range":392,"range_type":77,"version_start":383,"version_start_type":394,"version_end":423,"version_end_type":396,"fixed_in":9},">= 11.0, \u003C 11.*","11.*",{"version":425,"is_range":392,"range_type":77,"version_start":426,"version_start_type":394,"version_end":427,"version_end_type":396,"fixed_in":9},">= 12.0, \u003C 12.*","12.0","12.*",{"version":429,"is_range":392,"range_type":77,"version_start":430,"version_start_type":394,"version_end":431,"version_end_type":396,"fixed_in":9},">= 13.0, \u003C 13.*","13.0","13.*",{"version":433,"is_range":392,"range_type":77,"version_start":434,"version_start_type":394,"version_end":435,"version_end_type":396,"fixed_in":9},">= 15.0, \u003C 15.*","15.0","15.*",{"version":437,"is_range":392,"range_type":77,"version_start":438,"version_start_type":394,"version_end":439,"version_end_type":396,"fixed_in":9},">= 17.0, \u003C 17.*","17.0","17.*",{"version":441,"is_range":392,"range_type":77,"version_start":442,"version_start_type":394,"version_end":443,"version_end_type":396,"fixed_in":9},">= 18.0, \u003C 18.9.1","18.0","18.9.1",{"ecosystem":9,"name":445,"vendor":387,"product":445,"cpe_part":388,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":446},"node.js",[447,451,455,459],{"version":448,"is_range":392,"range_type":384,"version_start":449,"version_start_type":394,"version_end":450,"version_end_type":394,"fixed_in":9},"gte15.0.0_lte15.14.0","15.0.0","15.14.0",{"version":452,"is_range":392,"range_type":384,"version_start":453,"version_start_type":394,"version_end":454,"version_end_type":394,"fixed_in":9},"gte16.0.0_lte16.12.0","16.0.0","16.12.0",{"version":456,"is_range":392,"range_type":384,"version_start":457,"version_start_type":394,"version_end":458,"version_end_type":396,"fixed_in":9},"gte16.13.0_lt16.17.1","16.13.0","16.17.1",{"version":460,"is_range":392,"range_type":384,"version_start":461,"version_start_type":394,"version_end":443,"version_end_type":396,"fixed_in":9},"gte18.0.0_lt18.9.1","18.0.0",{"ecosystem":9,"name":463,"vendor":464,"product":465,"cpe_part":388,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":466},"sinec ins","siemens","sinec_ins",[467,470,471,473],{"version":468,"is_range":392,"range_type":384,"version_start":9,"version_start_type":9,"version_end":469,"version_end_type":396,"fixed_in":9},"lt1.0","1.0",{"version":469,"is_range":28,"range_type":384,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":472,"is_range":28,"range_type":384,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.0:sp1",{"version":474,"is_range":28,"range_type":384,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.0:sp2"]