DeriveBits
Defined in 18 files
Last patched
Overview
DeriveBits in nodejs/node was changed by 1 published CVE fixes in 2025, in 18 distinct patches that added or removed 166 lines in total.
The name occurs in 18 files: src/crypto/crypto_random.h, src/crypto/crypto_random.cc, src/crypto/crypto_sig.cc, src/crypto/crypto_hkdf.cc, src/crypto/crypto_dh.h, src/crypto/crypto_scrypt.cc, src/crypto/crypto_scrypt.h, src/crypto/crypto_dh.cc, src/crypto/crypto_pbkdf2.h, src/crypto/crypto_sig.h, src/crypto/crypto_hash.cc, src/crypto/crypto_pbkdf2.cc, src/crypto/crypto_hash.h, src/crypto/crypto_hmac.h, src/crypto/crypto_hkdf.h, src/crypto/crypto_hmac.cc, src/crypto/crypto_ec.h, src/crypto/crypto_ec.cc.
nodejs/node has 13 CVEs with a located fix in total, so 8% of them touched this function.
CVEs that patched it
Every published CVE whose fix changed DeriveBits, newest first, with the lines each fix touched.
CVE-2025-23166 · src/crypto/crypto_dh.cc · lines 708–711 · +4 −4
High · CVSS 7.5EPSS 0.8%2025-05-19CVE-2025-23166 · src/crypto/crypto_dh.h · lines 134–137 · +4 −4
High · CVSS 7.5EPSS 0.8%2025-05-19