CVE-2025-59466_CVE-2025-59466

{
    "lastseen": "",
    "description": "We have identified a bug in Node.js error handling where \"Maximum call stack size exceeded\" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on('uncaughtException')`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.",
    "published": "2026-01-20T20:41:55.628Z",
    "modified": "2026-01-20T20:41:55.628Z",
    "type": "cve",
    "title": "CVE-2025-59466",
    "source": "hackerone",
    "references": "https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",
    "id": "CVE-2025-59466",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "nodejs node 20.19.6\nnodejs node 22.21.1\nnodejs node 24.12.0\nnodejs node 25.2.1\nnodejs node 8.0\nnodejs node 9.0\nnodejs node 10.0\nnodejs node 11.0\nnodejs node 12.0\nnodejs node 13.0\nnodejs node 14.0\nnodejs node 15.0\nnodejs node 16.0\nnodejs node 17.0\nnodejs node 18.0",
    "sourceHref": "",
    "cvss": {
        "score": 5.9,
        "severity": "MEDIUM",
        "vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version": "3.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "node",
    "version": "20.19.6",
    "vendor": "nodejs",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}