Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hw7r-7v27-7388

Опубликовано: 30 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

A flaw in Node.js Permission Model enforcement allows trace_events.createTracing().enable() Writes Trace Logs Outside --allow-fs-write.

This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.

This vulnerability affects Node.js 22.x, 24.x, and 26.x.

A flaw in Node.js Permission Model enforcement allows trace_events.createTracing().enable() Writes Trace Logs Outside --allow-fs-write.

This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.

This vulnerability affects Node.js 22.x, 24.x, and 26.x.

EPSS

Процентиль: 5%
0.00158
Низкий

3.3 Low

CVSS3

Дефекты

CWE-1119

Связанные уязвимости

CVSS3: 3.3
ubuntu
8 дней назад

A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

CVSS3: 3.3
nvd
8 дней назад

A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

CVSS3: 3.3
debian
8 дней назад

A flaw in Node.js Permission Model enforcement allows `trace_events.cr ...

EPSS

Процентиль: 5%
0.00158
Низкий

3.3 Low

CVSS3

Дефекты

CWE-1119