Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hwhp-f859-r728

Опубликовано: 26 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the --allow-net permission.

This vulnerability affects one supported release line: Node.js 26.

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the --allow-net permission.

This vulnerability affects one supported release line: Node.js 26.

EPSS

Процентиль: 5%
0.00154
Низкий

3.3 Low

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 3.3
ubuntu
около 1 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

CVSS3: 3.3
redhat
около 1 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

CVSS3: 3.3
nvd
около 1 месяца назад

A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.

CVSS3: 3.3
debian
около 1 месяца назад

A flaw in Node.js Permission API can cause a local server to be starte ...

EPSS

Процентиль: 5%
0.00154
Низкий

3.3 Low

CVSS3

Дефекты

CWE-284