[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-23165":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":62,"related":65,"reserved_at":9,"published_at":80,"modified_at":81,"state":82,"summary":83,"references_raw":91,"kevs":108,"epss":109,"epss_history":112,"metrics":390,"affected":402},"CVE-2025-23165","In Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.file`: a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set. This results in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service.\r\n\r\nImpact:\r\n* This vulnerability affects APIs relying on `ReadFileUtf8` on Node.js release lines: v20 and v22.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.","weakness","Draft","Variant","Medium",[],[],[22,23,24,25,26,27,28,29],"DEBIAN-CVE-2025-23165","ALPINE-CVE-2025-23165","CGA-359g-mvfq-6268","CGA-4hxc-595f-hfx6","CGA-9xrx-f2xc-j88j","CGA-hrm2-2cw3-9835","CGA-rggc-jpvv-mcp3","CGA-rqpf-f87p-m57r",[],[32,34,36,38,40,42,44,46,48,49,50,52,54,56,58,60],{"_key":33},"UBUNTU-CVE-2025-23165",{"_key":35},"SUSE-SU-2025:01879-1",{"_key":37},"SUSE-SU-2025:01878-1",{"_key":39},"SUSE-SU-2025:02039-1",{"_key":41},"SUSE-SU-2025:02045-1",{"_key":43},"OPENSUSE-SU-2025:15250-1",{"_key":45},"OPENSUSE-SU-2025:15802-1",{"_key":47},"MGASA-2025-0161",{"_key":23},{"_key":22},{"_key":51},"OPENSUSE-SU-2026:11110-1",{"_key":53},"RHSA-2025:8467",{"_key":55},"RHSA-2025:8468",{"_key":57},"RHSA-2025:8493",{"_key":59},"RHSA-2025:8506",{"_key":61},"RHSA-2025:8514",[63],{"_key":64},"CVE-2025-23122",[66,67,68,69,70,71,72,73,74,76,78],{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":51},{"_key":75},"CGA-998C-4WRM-HH4R",{"_key":77},"CGA-H6HQ-M39M-6V38",{"_key":79},"CGA-J36F-737C-Q459","2025-05-19T01:25:08.569Z","2025-05-28T00:06:31.253Z","Deferred",{"cisa_kev":84,"cisa_ransomware":84,"cisa_vendor":9,"epss_severity":85,"epss_score":86,"severity":85,"severity_score":87,"severity_version":88,"severity_source":89,"severity_vector":90,"severity_status":82},false,"low",0.00554,3.7,"v3.0","cve.org","CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",[92,97,103],{"url":93,"sources":94,"tags":96},"https://nodejs.org/en/blog/vulnerability/may-2025-security-releases",[89,95],"nvd",[],{"url":98,"sources":99,"tags":101},"https://security-tracker.debian.org/tracker/CVE-2025-23165",[100],"osv_debian",[102],"Advisory",{"url":104,"sources":105,"tags":107},"https://security.alpinelinux.org/vuln/CVE-2025-23165",[106],"osv_alpine",[102],[],{"date":110,"score":86,"percentile":111},"2026-09-19",0.45089,[113,117,120,123,126,129,132,135,138,141,144,147,150,153,156,160,163,166,169,172,175,178,181,184,187,190,193,196,200,203,206,209,212,215,218,221,223,226,229,232,236,239,242,245,248,251,254,257,260,263,267,270,273,276,279,282,285,288,291,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355,359,362,365,368,371,374,377,380,383,386],{"date":114,"score":115,"percentile":116},"2025-11-04",0.00071,0.22144,{"date":118,"score":115,"percentile":119},"2025-11-05",0.22141,{"date":121,"score":115,"percentile":122},"2025-11-06",0.22152,{"date":124,"score":115,"percentile":125},"2025-11-07",0.2217,{"date":127,"score":115,"percentile":128},"2025-11-08",0.2218,{"date":130,"score":115,"percentile":131},"2025-11-09",0.22134,{"date":133,"score":115,"percentile":134},"2025-11-10",0.22071,{"date":136,"score":115,"percentile":137},"2025-11-11",0.22096,{"date":139,"score":115,"percentile":140},"2025-11-12",0.22151,{"date":142,"score":115,"percentile":143},"2025-11-13",0.22161,{"date":145,"score":115,"percentile":146},"2025-11-14",0.22153,{"date":148,"score":115,"percentile":149},"2025-11-15",0.22138,{"date":151,"score":115,"percentile":152},"2025-11-16",0.22088,{"date":154,"score":115,"percentile":155},"2025-11-17",0.22048,{"date":157,"score":158,"percentile":159},"2025-11-18",0.00121,0.26449,{"date":161,"score":158,"percentile":162},"2025-11-19",0.26471,{"date":164,"score":158,"percentile":165},"2025-11-20",0.26477,{"date":167,"score":115,"percentile":168},"2025-11-21",0.22009,{"date":170,"score":115,"percentile":171},"2025-11-22",0.22007,{"date":173,"score":115,"percentile":174},"2025-11-23",0.21971,{"date":176,"score":115,"percentile":177},"2025-11-24",0.21942,{"date":179,"score":115,"percentile":180},"2025-11-25",0.21926,{"date":182,"score":115,"percentile":183},"2025-11-26",0.21914,{"date":185,"score":115,"percentile":186},"2025-11-27",0.21871,{"date":188,"score":115,"percentile":189},"2025-11-28",0.21847,{"date":191,"score":115,"percentile":192},"2025-11-29",0.21835,{"date":194,"score":115,"percentile":195},"2025-11-30",0.21825,{"date":197,"score":198,"percentile":199},"2025-12-01",0.00062,0.19242,{"date":201,"score":198,"percentile":202},"2025-12-02",0.19264,{"date":204,"score":198,"percentile":205},"2025-12-03",0.1928,{"date":207,"score":115,"percentile":208},"2025-12-04",0.21846,{"date":210,"score":115,"percentile":211},"2025-12-05",0.21887,{"date":213,"score":115,"percentile":214},"2025-12-06",0.21885,{"date":216,"score":115,"percentile":217},"2025-12-07",0.21849,{"date":219,"score":115,"percentile":220},"2025-12-08",0.21862,{"date":222,"score":115,"percentile":183},"2025-12-09",{"date":224,"score":115,"percentile":225},"2025-12-10",0.2199,{"date":227,"score":115,"percentile":228},"2025-12-11",0.2203,{"date":230,"score":115,"percentile":231},"2025-12-12",0.22042,{"date":233,"score":234,"percentile":235},"2025-12-13",0.00077,0.23302,{"date":237,"score":234,"percentile":238},"2025-12-14",0.23269,{"date":240,"score":234,"percentile":241},"2025-12-15",0.23249,{"date":243,"score":234,"percentile":244},"2025-12-16",0.23273,{"date":246,"score":234,"percentile":247},"2025-12-17",0.23352,{"date":249,"score":234,"percentile":250},"2025-12-18",0.23387,{"date":252,"score":234,"percentile":253},"2025-12-19",0.23408,{"date":255,"score":234,"percentile":256},"2025-12-20",0.2338,{"date":258,"score":234,"percentile":259},"2025-12-21",0.2333,{"date":261,"score":234,"percentile":262},"2025-12-22",0.23296,{"date":264,"score":265,"percentile":266},"2025-12-23",0.00073,0.22475,{"date":268,"score":265,"percentile":269},"2025-12-24",0.2249,{"date":271,"score":265,"percentile":272},"2025-12-25",0.22572,{"date":274,"score":265,"percentile":275},"2025-12-26",0.22555,{"date":277,"score":265,"percentile":278},"2025-12-27",0.22569,{"date":280,"score":265,"percentile":281},"2025-12-28",0.22519,{"date":283,"score":265,"percentile":284},"2025-12-29",0.22485,{"date":286,"score":265,"percentile":287},"2025-12-30",0.22466,{"date":289,"score":265,"percentile":290},"2025-12-31",0.22524,{"date":292,"score":293,"percentile":294},"2026-01-01",0.00064,0.20178,{"date":296,"score":293,"percentile":297},"2026-01-02",0.20181,{"date":299,"score":293,"percentile":300},"2026-01-03",0.20162,{"date":302,"score":265,"percentile":303},"2026-01-04",0.22512,{"date":305,"score":265,"percentile":306},"2026-01-05",0.22504,{"date":308,"score":265,"percentile":309},"2026-01-06",0.22515,{"date":311,"score":265,"percentile":312},"2026-01-07",0.22551,{"date":314,"score":265,"percentile":315},"2026-01-08",0.22609,{"date":317,"score":265,"percentile":318},"2026-01-09",0.22605,{"date":320,"score":265,"percentile":321},"2026-01-10",0.22597,{"date":323,"score":265,"percentile":324},"2026-01-11",0.22566,{"date":326,"score":265,"percentile":327},"2026-01-12",0.22528,{"date":329,"score":265,"percentile":330},"2026-01-13",0.22505,{"date":332,"score":265,"percentile":333},"2026-01-14",0.22568,{"date":335,"score":265,"percentile":336},"2026-01-15",0.22567,{"date":338,"score":265,"percentile":339},"2026-01-16",0.22592,{"date":341,"score":265,"percentile":342},"2026-01-17",0.22591,{"date":344,"score":265,"percentile":345},"2026-01-18",0.22534,{"date":347,"score":265,"percentile":348},"2026-01-19",0.22488,{"date":350,"score":265,"percentile":351},"2026-01-20",0.22457,{"date":353,"score":265,"percentile":354},"2026-01-21",0.22415,{"date":356,"score":357,"percentile":358},"2026-01-22",0.00079,0.23784,{"date":360,"score":357,"percentile":361},"2026-01-23",0.23869,{"date":363,"score":357,"percentile":364},"2026-01-24",0.23881,{"date":366,"score":357,"percentile":367},"2026-01-25",0.23797,{"date":369,"score":357,"percentile":370},"2026-01-26",0.23697,{"date":372,"score":357,"percentile":373},"2026-01-27",0.23686,{"date":375,"score":357,"percentile":376},"2026-01-28",0.23685,{"date":378,"score":357,"percentile":379},"2026-01-29",0.23637,{"date":381,"score":357,"percentile":382},"2026-01-30",0.23634,{"date":384,"score":357,"percentile":385},"2026-01-31",0.2363,{"date":387,"score":388,"percentile":389},"2026-02-01",0.00069,0.21281,[391,396,398,400],{"source":89,"cvss_v2_0":9,"cvss_v3_0":392,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":87,"baseSeverity":393,"vectorString":90,"impactScore":394,"exploitabilityScore":395},"LOW",2.3,5.6,{"source":95,"cvss_v2_0":9,"cvss_v3_0":397,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":87,"baseSeverity":393,"vectorString":90,"impactScore":394,"exploitabilityScore":395},{"source":100,"cvss_v2_0":9,"cvss_v3_0":399,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":87,"baseSeverity":9,"vectorString":90,"impactScore":394,"exploitabilityScore":395},{"source":106,"cvss_v2_0":9,"cvss_v3_0":401,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":87,"baseSeverity":9,"vectorString":90,"impactScore":394,"exploitabilityScore":395},[403,415,423,429,435,440,443,446,455],{"ecosystem":404,"name":405,"vendor":406,"product":405,"cpe_part":9,"purl_type":407,"purl_namespace":406,"purl_name":405,"source":9,"versions":408},"Alpine Linux","nodejs","alpine","apk",[409],{"version":410,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":413,"version_end_type":414,"fixed_in":9},"lt22_15_1_r0",true,"ecosystem","22.15.1-r0","excluding",{"ecosystem":416,"name":417,"vendor":418,"product":417,"cpe_part":9,"purl_type":407,"purl_namespace":418,"purl_name":417,"source":9,"versions":419},"Chainguard","nodejs-16","chainguard",[420],{"version":421,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":422,"version_end_type":414,"fixed_in":9},"lt16_20_2_r15","16.20.2-r15",{"ecosystem":416,"name":424,"vendor":418,"product":424,"cpe_part":9,"purl_type":407,"purl_namespace":418,"purl_name":424,"source":9,"versions":425},"nodejs-18",[426],{"version":427,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":428,"version_end_type":414,"fixed_in":9},"lt0","0",{"ecosystem":416,"name":430,"vendor":418,"product":430,"cpe_part":9,"purl_type":407,"purl_namespace":418,"purl_name":430,"source":9,"versions":431},"nodejs-21",[432],{"version":433,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":434,"version_end_type":414,"fixed_in":9},"lt21_7_3_r12","21.7.3-r12",{"ecosystem":436,"name":417,"vendor":437,"product":417,"cpe_part":9,"purl_type":407,"purl_namespace":437,"purl_name":417,"source":9,"versions":438},"Wolfi","wolfi",[439],{"version":421,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":422,"version_end_type":414,"fixed_in":9},{"ecosystem":436,"name":424,"vendor":437,"product":424,"cpe_part":9,"purl_type":407,"purl_namespace":437,"purl_name":424,"source":9,"versions":441},[442],{"version":427,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":428,"version_end_type":414,"fixed_in":9},{"ecosystem":436,"name":430,"vendor":437,"product":430,"cpe_part":9,"purl_type":407,"purl_namespace":437,"purl_name":430,"source":9,"versions":444},[445],{"version":433,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":434,"version_end_type":414,"fixed_in":9},{"ecosystem":447,"name":405,"vendor":448,"product":405,"cpe_part":9,"purl_type":449,"purl_namespace":448,"purl_name":405,"source":9,"versions":450},"Debian","debian","deb",[451,454],{"version":452,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":414,"fixed_in":9},"lt20_19_2+dfsg_1","20.19.2+dfsg-1",{"version":452,"is_range":411,"range_type":412,"version_start":9,"version_start_type":9,"version_end":453,"version_end_type":414,"fixed_in":9},{"ecosystem":9,"name":456,"vendor":405,"product":456,"cpe_part":457,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":458},"node","a",[459,464,468,472,476,480,484,488,492,496,500,504,508,512,516,520,524,528,532],{"version":460,"is_range":411,"range_type":89,"version_start":461,"version_start_type":462,"version_end":463,"version_end_type":414,"fixed_in":9},">= 4.0, \u003C 4.*","4.0","including","4.*",{"version":465,"is_range":411,"range_type":89,"version_start":466,"version_start_type":462,"version_end":467,"version_end_type":414,"fixed_in":9},">= 5.0, \u003C 5.*","5.0","5.*",{"version":469,"is_range":411,"range_type":89,"version_start":470,"version_start_type":462,"version_end":471,"version_end_type":414,"fixed_in":9},">= 6.0, \u003C 6.*","6.0","6.*",{"version":473,"is_range":411,"range_type":89,"version_start":474,"version_start_type":462,"version_end":475,"version_end_type":414,"fixed_in":9},">= 7.0, \u003C 7.*","7.0","7.*",{"version":477,"is_range":411,"range_type":89,"version_start":478,"version_start_type":462,"version_end":479,"version_end_type":414,"fixed_in":9},">= 8.0, \u003C 8.*","8.0","8.*",{"version":481,"is_range":411,"range_type":89,"version_start":482,"version_start_type":462,"version_end":483,"version_end_type":414,"fixed_in":9},">= 9.0, \u003C 9.*","9.0","9.*",{"version":485,"is_range":411,"range_type":89,"version_start":486,"version_start_type":462,"version_end":487,"version_end_type":414,"fixed_in":9},">= 10.0, \u003C 10.*","10.0","10.*",{"version":489,"is_range":411,"range_type":89,"version_start":490,"version_start_type":462,"version_end":491,"version_end_type":414,"fixed_in":9},">= 11.0, \u003C 11.*","11.0","11.*",{"version":493,"is_range":411,"range_type":89,"version_start":494,"version_start_type":462,"version_end":495,"version_end_type":414,"fixed_in":9},">= 12.0, \u003C 12.*","12.0","12.*",{"version":497,"is_range":411,"range_type":89,"version_start":498,"version_start_type":462,"version_end":499,"version_end_type":414,"fixed_in":9},">= 13.0, \u003C 13.*","13.0","13.*",{"version":501,"is_range":411,"range_type":89,"version_start":502,"version_start_type":462,"version_end":503,"version_end_type":414,"fixed_in":9},">= 14.0, \u003C 14.*","14.0","14.*",{"version":505,"is_range":411,"range_type":89,"version_start":506,"version_start_type":462,"version_end":507,"version_end_type":414,"fixed_in":9},">= 15.0, \u003C 15.*","15.0","15.*",{"version":509,"is_range":411,"range_type":89,"version_start":510,"version_start_type":462,"version_end":511,"version_end_type":414,"fixed_in":9},">= 16.0, \u003C 16.*","16.0","16.*",{"version":513,"is_range":411,"range_type":89,"version_start":514,"version_start_type":462,"version_end":515,"version_end_type":414,"fixed_in":9},">= 17.0, \u003C 17.*","17.0","17.*",{"version":517,"is_range":411,"range_type":89,"version_start":518,"version_start_type":462,"version_end":519,"version_end_type":414,"fixed_in":9},">= 18.0, \u003C 18.*","18.0","18.*",{"version":521,"is_range":411,"range_type":89,"version_start":522,"version_start_type":462,"version_end":523,"version_end_type":414,"fixed_in":9},">= 19.0, \u003C 19.*","19.0","19.*",{"version":525,"is_range":411,"range_type":89,"version_start":526,"version_start_type":462,"version_end":527,"version_end_type":462,"fixed_in":9},">= 20.0, \u003C= 20.19.1","20.0","20.19.1",{"version":529,"is_range":411,"range_type":89,"version_start":530,"version_start_type":462,"version_end":531,"version_end_type":462,"fixed_in":9},">= 22.0, \u003C= 22.15.0","22.0","22.15.0",{"version":533,"is_range":411,"range_type":89,"version_start":534,"version_start_type":462,"version_end":535,"version_end_type":414,"fixed_in":9},">= 21.0, \u003C 21.*","21.0","21.*"]