Bnoordhuis

**Name of the Vulnerable Software and Affected Versions** quickjs-ng versions 0.9.0 and earlier QuickJS versions prior to 2025-04-26 **Description** The issue is related to a missing length check in `JS ReadString` for a string, which can lead to a heap-based buffer overflow. **Recommendations** For quickjs-ng versions 0.9.0 and earlier, update to a version that includes the fix for the missing length check in `JS ReadString`. For QuickJS versions prior to 2025-04-26, update to a version released after 2025-04-26 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** quickjs-ng versions 0.9.0 and earlier QuickJS versions prior to 2025-04-26 **Description** The issue is related to an incorrect size calculation in `JS ReadBigInt` for a `BigInt`, leading to a heap-based buffer overflow. **Recommendations** For quickjs-ng versions 0.9.0 and earlier, update to a version later than 0.9.0 to resolve the issue. For QuickJS versions prior to 2025-04-26, update to a version released after 2025-04-26 to fix the problem. As a temporary workaround, consider restricting the use of the `JS ReadBigInt` function for `BigInt` values until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Node.js version 18 **Description** A weak randomness issue exists in the WebCrypto keygen due to a change with EntropySource() in SecretKeyGenTraits::DoKeyGen() in src/crypto/crypto keygen.cc. There are two main problems: 1. The return value of EntropySource() is not checked, assuming it always succeeds, but it can fail. 2. The random data returned by EntropySource() may not be cryptographically strong, making it unsuitable as keying material. **Recommendations** For Node.js version 18, consider disabling the use of WebCrypto keygen until a patch is available to address the weak randomness issue. Restrict access to the affected `EntropySource()` function to minimize the risk of exploitation. Avoid using the `SecretKeyGenTraits::DoKeyGen()` function in src/crypto/crypto keygen.cc until the issue is resolved.