{
  "cve": [
    "CVE-2015-3194"
  ],
  "vulnerable": "5.x || 4.x",
  "patched": "^5.1.1 || ^4.2.3",
  "ref": "https://github.com/nodejs/node/pull/4134",
  "description": "Certificate verify crash with missing PSS parameter",
  "overview": "A potential denial-of-service vector for Node.js TLS servers using client\ncertificate authentication; TLS clients are also impacted. Details are available\nat <http://openssl.org/news/secadv/20151203.txt>.\n\n",
  "affectedEnvironments": [
    "all"
  ],
  "severity": "high"
}