[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2025:02045-1":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T17:35:29.592Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":20,"duplicates":21,"related":22,"reserved_at":9,"published_at":26,"modified_at":27,"state":9,"summary":28,"references_raw":30,"kevs":68,"epss":9,"epss_history":69,"metrics":70,"affected":71},"SUSE-SU-2025:02045-1","Security update for nodejs20\n\nThis update for nodejs20 fixes the following issues:\n\nUpdate to 20.19.2:\n\n- CVE-2025-23166: improper error handling in async cryptographic operations crashes process (bsc#1243218).\n- CVE-2025-23167: improper HTTP header block termination in llhttp (bsc#1243220).\n- CVE-2025-23165: add missing call to uv_fs_req_cleanup (bsc#1243217).\n\nOther bugfixes:\n\n- Build with PIE (bsc#1239949)\n",null,[],[],[],[14,16,18],{"_key":15},"CVE-2025-23165",{"_key":17},"CVE-2025-23166",{"_key":19},"CVE-2025-23167",[],[],[23,24,25],{"_key":15},{"_key":17},{"_key":19},"2025-06-20T11:04:00Z","2026-03-23T04:49:34.072515Z",{"cisa_kev":29,"cisa_ransomware":29,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[31,38,43,47,51,55,60,64],{"url":32,"sources":33,"tags":36},"https://www.suse.com/support/update/announcement/2025/suse-su-202502045-1/",[34,35],"osv_suse","osv_opensuse",[37],"Advisory",{"url":39,"sources":40,"tags":41},"https://bugzilla.suse.com/1239949",[34,35],[42],"REPORT",{"url":44,"sources":45,"tags":46},"https://bugzilla.suse.com/1243217",[34,35],[42],{"url":48,"sources":49,"tags":50},"https://bugzilla.suse.com/1243218",[34,35],[42],{"url":52,"sources":53,"tags":54},"https://bugzilla.suse.com/1243220",[34,35],[42],{"url":56,"sources":57,"tags":58},"https://www.suse.com/security/cve/CVE-2025-23165",[34,35],[59],"WEB",{"url":61,"sources":62,"tags":63},"https://www.suse.com/security/cve/CVE-2025-23166",[34,35],[59],{"url":65,"sources":66,"tags":67},"https://www.suse.com/security/cve/CVE-2025-23167",[34,35],[59],[],[],[],[72,85],{"ecosystem":73,"name":74,"vendor":75,"product":76,"cpe_part":9,"purl_type":77,"purl_namespace":75,"purl_name":76,"source":9,"versions":78},"openSUSE","nodejs20","opensuse","nodejs20&distro=openSUSE Leap 15.6","rpm",[79],{"version":80,"is_range":81,"range_type":82,"version_start":9,"version_start_type":9,"version_end":83,"version_end_type":84,"fixed_in":9},"lt20_19_2_150600_3_12_1",true,"ecosystem","20.19.2-150600.3.12.1","excluding",{"ecosystem":86,"name":74,"vendor":87,"product":88,"cpe_part":9,"purl_type":77,"purl_namespace":87,"purl_name":88,"source":9,"versions":89},"SUSE Linux Enterprise","suse","nodejs20&distro=SUSE Linux Enterprise Module for Web and Scripting 15 SP6",[90],{"version":80,"is_range":81,"range_type":82,"version_start":9,"version_start_type":9,"version_end":83,"version_end_type":84,"fixed_in":9}]