https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T23:51:25.556769+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-106074 fkie_cve-2026-106074 2026-10-25T23:51:25.559158+00:00

A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`.

If any of these functions, or an API that relies on them such as `URL.createObjectURL()`, is called while the snapshot is built, every process started from that snapshot returns the same values until the cache is refilled: up to 127 UUIDs and about 1,000 `randomInt()` values. Identifiers expected to be unique can collide across processes, and values issued by one process can be predicted by observing another.

This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

 https://db.gcve.eu/vuln/ghsa-w3gx-6c8w-v66f GHSA-w3gx-6c8w-v66f 2026-10-25T23:51:25.559241+00:00

A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-snapshot`) and single executable applications built with `useSnapshot`.

If any of these functions, or an API that relies on them such as `URL.createObjectURL()`, is called while the snapshot is built, every process started from that snapshot returns the same values until the cache is refilled: up to 127 UUIDs and about 1,000 `randomInt()` values. Identifiers expected to be unique can collide across processes, and values issued by one process can be predicted by observing another.

This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.

 https://db.gcve.eu/vuln/msrc_cve-2026-106074 msrc_CVE-2026-106074 — A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, a… 2026-10-25T23:51:25.559264+00:00 msrc_CVE-2026-106074 https://db.gcve.eu/vuln/opensuse-su-2026:12248-1 openSUSE-SU-2026:12248-1 — corepack24-24.22.1-1.1 on GA media 2026-10-25T23:51:25.559289+00:00

corepack24-24.22.1-1.1 on GA media

 https://db.gcve.eu/vuln/ubuntu-cve-2026-106074 UBUNTU-CVE-2026-106074 2026-10-25T23:51:25.559307+00:00

Affected: Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:Pro:20.04:LTS: nodejs, Ubuntu:Pro:22.04:LTS: nodejs, Ubuntu:24.04:LTS: nodejs, Ubuntu:26.10: nodejs, Ubuntu:26.04:LTS: nodejs

[Unknown description]