CVE-2025-55131

Name of the Vulnerable Software and Affected Versions Node.js (affected versions not specified)

Description A flaw exists in Node.js related to out-of-bounds deletion of critical data. Remote attackers may be able to impact the confidentiality and integrity of information. A race condition in

Buffer.alloc()

combined with virtual machine timeouts can expose uninitialized memory. This is particularly dangerous in multi-tenant or untrusted code environments, potentially leading to the leakage of secrets, tokens, and keys within the process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.