Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rv82-5vqw-69hj

Опубликовано: 18 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 1.8

Описание

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport() Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26.

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport() Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26.

EPSS

Процентиль: 25%
0.00317
Низкий

1.8 Low

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 8.2
ubuntu
5 месяцев назад

A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

CVSS3: 2.9
redhat
5 месяцев назад

A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

CVSS3: 8.2
nvd
5 месяцев назад

A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

CVSS3: 8.2
debian
5 месяцев назад

A flaw in Node.js Permission Model enforcement allows Bypass via `proc ...

suse-cvrf
4 месяца назад

Security update for nodejs22

EPSS

Процентиль: 25%
0.00317
Низкий

1.8 Low

CVSS3

Дефекты

CWE-284