Search: CVE-2025-23166

A security update for Node.js 20 on Red Hat Enterprise Linux 9.4 addresses a vulnerability identified as CVE-2025-23166. The issue involves a remote crash triggered via the SignTraits::DeriveBits() function in Node.js. Red Hat has rated this update as important and has released updated packages to remediate the vulnerability. The advisory applies to multiple architectures and extended update support versions of Red Hat Enterprise Linux 9.4. No CVSS score is provided, but the severity is assessed as high by Red Hat. There are no known exploits in the wild at this time.