Nodejs Node.js 10.13.0 LTS Edition

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:nodejs:node.js:10.13.0:*:*:*:lts:*:*:*

part: a version: 10.13.0 update: *

VendorNodejs (1eb6e5de-a495-50c0-9bb4-c8200a117578)
ProductNode.Js (35820ba0-265c-5d96-8f6e-66bb0af213e7)
Edition*
Language*
Software editionlts
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/nodejs purl2cpe 2026-06-01 10:15:58.704200
pkg:deb/ubuntu/nodejs purl2cpe 2026-06-01 10:15:58.704201
pkg:github/nodejs/node purl2cpe 2026-06-01 10:15:58.704202
pkg:rpm/fedora/nodejs purl2cpe 2026-06-01 10:15:58.704204

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0735 vulnerable 2026-06-08 05:10:24.626718 Timing attack against ECDSA signature generation
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
Published: 2018-10-29T13:00:00.000Z
Updated: 2024-09-16T19:10:32.005Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0734 vulnerable 2026-06-08 05:10:24.607246 Timing attack against DSA
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
Published: 2018-10-30T12:00:00.000Z
Updated: 2024-09-16T23:10:36.543Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.