{
  "cve": [
    "CVE-2023-46809"
  ],
  "vulnerable": "18.x || 20.x || 21.x",
  "patched": "^18.19.1 || ^20.11.1 || ^21.6.2",
  "ref": "https://nodejs.org/en/blog/vulnerability/february-2024-security-releases/",
  "overview": "A vulnerability in the privateDecrypt() API of the crypto library, allowed a covert timing side-channel during PKCS#1 v1.5 padding error handling.",
  "affectedEnvironments": [
    "all"
  ],
  "severity": "medium"
}