Skip to content

Conversation

nodejs-github-bot
Copy link
Collaborator

This is an automated update of OpenSSL to 3.5.4.

@nodejs-github-bot nodejs-github-bot added dependencies Pull requests that update a dependency file. openssl Issues and PRs related to the OpenSSL dependency. labels Oct 1, 2025
@nodejs-github-bot
Copy link
Collaborator Author

Review requested:

  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added the needs-ci PRs that need a full CI run. label Oct 1, 2025
@targos targos closed this Oct 1, 2025
@targos targos deleted the actions/tools-update-openssl branch October 1, 2025 18:49
@chrisharrison
Copy link

OpenSSL < 3.5.4 is vulnerable. Currently the latest versions of Node 22 and 24 have a vulnerable version of OpenSSL embedded.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file. needs-ci PRs that need a full CI run. openssl Issues and PRs related to the OpenSSL dependency.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants