CVE-2025-59464

Name of the Vulnerable Software and Affected Versions Node.js version 24 Description A memory leak exists in Node.js’s OpenSSL integration when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. Calling socket.getPeerCertificate(true) causes a memory leak for each certificate field, potentially leading to resource exhaustion and a denial of service through repeated TLS connections. The socket.getPeerCertificate(true) function is involved in the issue. Recommendations Update to a newer version that contains a fix for this vulnerability.