- Fix error handling for async crypto operations to address CVE‑2025‑23166
- Release classified as a security update resolving a crypto vulnerability
GitHub changelog digest
May 12 - May 18, 2025. Useful releases, risky migrations, and noisy updates from the GitHub channel.
No matching updates in this bucket.
GitHub updates in 2025-w20
- Fix CVE-2025-23166 by correcting error handling on async crypto operations
- Update c-ares dependency to version 1.34.5
- Fixed error handling in async crypto operations (CVE‑2025‑23166).
- Added missing uv_fs_req_cleanup call in the file system module (CVE‑2025‑23165).
- Fix error handling on async crypto operations (CVE‑2025‑23166) – introduces breaking changes.
- Add missing call to uv_fs_req_cleanup in the fs module (CVE‑2025‑23165).
- Update llhttp dependency to version 9.2.0 (SEMVER major bump).
- Introduces GA Trace Explorer for browsing span/trace samples
- Enables on‑the‑fly aggregation of any span attribute to compute metrics without cardinality limits
- Allows flexible, ad‑hoc metric creation directly from trace data