CVE-2022-35255

A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. There are two problems with this: 1) It does not check the return value, it assumes EntropySource() always succeeds, but it can (and sometimes will) fail. 2) The random data returned byEntropySource() may not be cryptographically strong and therefore not suitable as keying material.

• CWE-338
• CWE-338

• https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdfThird Party Advisory
• https://hackerone.com/reports/1690000Exploit, Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230113-0002/Third Party Advisory
• https://www.debian.org/security/2023/dsa-5326Third Party Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdfThird Party Advisory
• https://hackerone.com/reports/1690000Exploit, Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20230113-0002/Third Party Advisory
• https://www.debian.org/security/2023/dsa-5326Third Party Advisory

Published

Dec 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3525Deserialization of Untrusted Data in GitHub repository libre…8.8
• CVE-2022-35250A privilege escalation vulnerability exists in Rocket.chat <…4.3
• CVE-2022-35251A cross-site scripting vulnerability exists in Rocket.chat <…5.4
• CVE-2022-35252When curl is used to retrieve and parse cookies from a HTTP(…3.7
• CVE-2022-35253Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-35254An unauthenticated attacker can cause a denial-of-service to…7.5
• CVE-2022-35256The llhttp parser in the http module in Node v18.7.0 does no…6.5
• CVE-2022-35257A local privilege escalation vulnerability in UI Desktop for…7.8
• CVE-2022-35258An unauthenticated attacker can cause a denial-of-service to…7.5
• CVE-2022-35259XML Injection with Endpoint Manager 2022. 3 and below causin…7.8
• CVE-2022-3526A vulnerability classified as problematic was found in Linux…7.5
• CVE-2022-35260curl can be told to parse a `.netrc` file for credentials. I…6.5