CVE-2026-111498

CVE-2026-111498

Node.js crypto.diffieHellman() silent key error. For DH groups with a prime larger than 1024 bits, values above 1023 bits have their most significant bits silently discarded, so the derived shared secret does not match the peer's and applications proceed with mismatched keys.

#CVE #NodeJS #Cryptography #KeyMismatch