Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hwhp-f859-r728

Опубликовано: 26 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the --allow-net permission.

This vulnerability affects one supported release line: Node.js 26.

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the --allow-net permission.

This vulnerability affects one supported release line: Node.js 26.

EPSS

Процентиль: 3%
0.00135
Низкий

3.3 Low

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 3.3
ubuntu
3 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

CVSS3: 3.3
redhat
3 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

CVSS3: 3.3
nvd
3 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

CVSS3: 3.3
debian
3 месяца назад

A flaw in Node.js Permission API can cause a local server to be starte ...

EPSS

Процентиль: 3%
0.00135
Низкий

3.3 Low

CVSS3

Дефекты

CWE-284