A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in…

Description

A weak randomness in WebCrypto keygen vulnerability exists in Node.js 18 due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto_keygen.cc. There are two problems with this: 1) It does not check the return value, it assumes EntropySource() always succeeds, but it can (and sometimes will) fail. 2) The random data returned byEntropySource() may not be cryptographically strong and therefore not suitable as keying material.

Scores

EPSS (exploitation in 30 days)

2.1% · top 18% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: yes · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.1.

Weakness

• CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) (CWE-338) (opens in a new tab)All about CWE-338 and its CVEs

Affected products

• NodeJS · Node

  • affected 4.0 – < 4.*
  • affected 5.0 – < 5.*
  • affected 6.0 – < 6.*
  • affected 7.0 – < 7.*
  • affected 8.0 – < 8.*
  • affected 9.0 – < 9.*
  • affected 10.0 – < 10.*
  • affected 11.0 – < 11.*
  • affected 12.0 – < 12.*
  • affected 13.0 – < 13.*
  • affected 15.0 – < 15.*
  • affected 17.0 – < 17.*
  • affected 18.0 – < 18.9.1

References (4)

• https://hackerone.com/reports/1690000 (opens in a new tab)x_transferred
• https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf (opens in a new tab)x_transferred
• https://security.netapp.com/advisory/ntap-20230113-0002/ (opens in a new tab)x_transferred
• DSA-5326 (opens in a new tab)vendor-advisoryx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2022-35255](https://trackcve.app/badge/CVE-2022-35255.svg)](https://trackcve.app/cve/CVE-2022-35255)

Record last updated 30 Apr 2025, 05:48 UTC.