Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-7199

Высокий

ALT-PU-2024-7199: package node update to version 20.12.2-alt1

Источник
errata.altlinux.org
Дата публикации
27.04.2024
Дата обновления
04.02.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades node to version 20.12.2-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 8.1
ubuntu
почти 2 года назад

Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.

redhat
больше 2 лет назад

Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.

CVSS3: 8.1
nvd
почти 2 года назад

Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.

CVSS3: 8.1
debian
почти 2 года назад

Due to the improper handling of batch files in child_process.spawn / c ...

CVSS3: 8.1
github
почти 2 года назад

Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.