Skip to content

handle unsupported RSA_PKCS1_PADDING error for private decryption

Syeda Shagufta Naaz requested to merge snaaz/node-public-encrypt:fix_RSA_PKCS1_PADDING into master

Nodejs v18.20.4 and later versions have removed support for RSA_PKCS1_PADDING in private decryption to address the Marvin Attack vulnerability (CVE-2023-46809).

Signed-off-by: Syeda Shagufta Naaz syedashagufta.naaz@siemens.com

Merge request reports