Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2019-15604 — HIGH severity vulnerability | Release Alert

CVE-2019-15604

7.5

HIGHCVSS v3

Published

February 7, 2020

CVSS v2

5 MEDIUM

Affected

9 projects

Assigned by

[email protected]

Severity scale

010

Description

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

@externs/nodejs

NPMThe Closure Compiler Externs For Node.JS.

= *, >= 12.0.0, < 12.15.0, >= 10.0.0, < 10.19.0, >= 13.0.0, < 13.8.0NVD

GitHubThe Externs For Node.JS.

= *, >= 12.0.0, < 12.15.0, >= 10.0.0, < 10.19.0, >= 13.0.0, < 13.8.0NVD

More on this CVE

NVD↗GitHub Advisory↗

NPM

Mocks Of Built-In Node.JS Modules To Use For Compilation.

= *, >= 12.0.0, < 12.15.0, >= 10.0.0, < 10.19.0, >= 13.0.0, < 13.8.0NVD

@opencensus/nodejs

NPMOpenCensus is a toolkit for collecting application performance and behavior data.

= *, >= 12.0.0, < 12.15.0, >= 10.0.0, < 10.19.0, >= 13.0.0, < 13.8.0NVD

GitHubMocks Of Built-In Node.JS Modules To Use For Compilation.

= *, >= 12.0.0, < 12.15.0, >= 10.0.0, < 10.19.0, >= 13.0.0, < 13.8.0NVD

Python Package IndexPython bindings and utils for Node.js and io.js

= *, >= 12.0.0, < 12.15.0, >= 10.0.0, < 10.19.0, >= 13.0.0, < 13.8.0NVD

NPM

= *, >= 12.0.0, < 12.15.0, >= 10.0.0, < 10.19.0, >= 13.0.0, < 13.8.0NVD

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

= *, >= 12.0.0, < 12.15.0, >= 10.0.0, < 10.19.0, >= 13.0.0, < 13.8.0NVD

Docker HubOfficial openSUSE Leap Images

= 15.1NVD