VDB
BIT-node-min-2025-27209
BIT-node-min-2025-27209
PUBLISHED
CVSS 7.5 HIGH
The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation re-introduces the HashDoS vulnerability as an attacker who can control the strings to be hashed can generate many hash collisions - an attacker can generate collisions even without knowing the hash-seed. * This vulnerability affects Node.js v24.x users.
Risk Scores
CVSS v3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | node-min | 24.0.0, 24.0.0, 24.0.0 |
Timeline
- Jul 22, 2025 CVE Published
- Nov 6, 2025 CVE Updated