CVE-2025-23166 | Node.js Async Cryptographic Operation SignTraits::DeriveBits denial of service

A vulnerability, which was classified as problematic, was found in Node.js. This affects the function SignTraits::DeriveBits of the component Async Cryptographic Operation Handler. The manipulation leads to denial of service.

This vulnerability is uniquely identified as CVE-2025-23166. Access to the local network is required for this attack to succeed. There is no exploit available.

It is recommended to upgrade the affected component.