CVE-2019-15604 Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509…

Description

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate

Affected products and versions

Product	Affected versions	Fixed in
Node 13.0	13.0 → < 13.8.0	13.8.0
Node 12.0	12.0 → < 12.15.0	12.15.0
Node 11.0	11.0 → latest	No fix stated
Node 10.0	10.0 → < 10.19.0	10.19.0
Node 9.0	9.0 → latest	No fix stated
Node 8.0	8.0 → latest	No fix stated
Node 7.0	7.0 → latest	No fix stated
Node 6.0	6.0 → latest	No fix stated
Node 5.0	5.0 → latest	No fix stated

Show the other branch Hide the other branch

Product	Affected versions	Fixed in
Node 4.0	4.0 → latest	No fix stated

Other CVEs of Node

The 129 CVEs of Node →

CVE-2026-106071 A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard… 3.6 Low CVE-2026-105483 A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a… 7.4 High CVE-2026-106069 A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP… 7.4 High CVE-2026-106074 A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`,… 4.8 Medium