Количество 20
Количество 20
GHSA-356r-x8g9-vh8c
The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.

CVE-2023-32006
The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.

CVE-2023-32006
The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.

CVE-2023-32006
The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
CVE-2023-32006
The use of `module.constructor.createRequire()` can bypass the policy ...

BDU:2023-04954
Уязвимость модуля module.constructor.createRequire() программной платформы Node.js, позволяющая нарушителю обойти введенные ограничения безопасности

SUSE-SU-2023:3400-1
Security update for nodejs16

SUSE-SU-2023:3379-1
Security update for nodejs16

SUSE-SU-2023:3378-1
Security update for nodejs18

SUSE-SU-2023:3356-1
Security update for nodejs18

SUSE-SU-2023:3355-1
Security update for nodejs16

RLSA-2023:5532
Important: nodejs security and bug fix update
ELSA-2023-5532
ELSA-2023-5532: nodejs security and bug fix update (IMPORTANT)
ELSA-2023-5363
ELSA-2023-5363: nodejs:18 security, bug fix, and enhancement update (IMPORTANT)
ELSA-2023-5362
ELSA-2023-5362: nodejs:18 security, bug fix, and enhancement update (IMPORTANT)
ELSA-2023-5360
ELSA-2023-5360: nodejs:16 security, bug fix, and enhancement update (IMPORTANT)

SUSE-SU-2023:3408-1
Security update for nodejs14

SUSE-SU-2023:3306-1
Security update for nodejs14

SUSE-SU-2023:3455-1
Security update for nodejs12

ROS-20240916-03
Множественные уязвимости nodejs
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
---|---|---|---|---|
GHSA-356r-x8g9-vh8c The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. | CVSS3: 8.8 | 0% Низкий | почти 2 года назад | |
![]() | CVE-2023-32006 The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. | CVSS3: 8.8 | 0% Низкий | почти 2 года назад |
![]() | CVE-2023-32006 The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. | CVSS3: 7.1 | 0% Низкий | почти 2 года назад |
![]() | CVE-2023-32006 The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. | CVSS3: 8.8 | 0% Низкий | почти 2 года назад |
CVE-2023-32006 The use of `module.constructor.createRequire()` can bypass the policy ... | CVSS3: 8.8 | 0% Низкий | почти 2 года назад | |
![]() | BDU:2023-04954 Уязвимость модуля module.constructor.createRequire() программной платформы Node.js, позволяющая нарушителю обойти введенные ограничения безопасности | CVSS3: 6.5 | 0% Низкий | почти 2 года назад |
![]() | SUSE-SU-2023:3400-1 Security update for nodejs16 | почти 2 года назад | ||
![]() | SUSE-SU-2023:3379-1 Security update for nodejs16 | почти 2 года назад | ||
![]() | SUSE-SU-2023:3378-1 Security update for nodejs18 | почти 2 года назад | ||
![]() | SUSE-SU-2023:3356-1 Security update for nodejs18 | почти 2 года назад | ||
![]() | SUSE-SU-2023:3355-1 Security update for nodejs16 | почти 2 года назад | ||
![]() | RLSA-2023:5532 Important: nodejs security and bug fix update | больше 1 года назад | ||
ELSA-2023-5532 ELSA-2023-5532: nodejs security and bug fix update (IMPORTANT) | больше 1 года назад | |||
ELSA-2023-5363 ELSA-2023-5363: nodejs:18 security, bug fix, and enhancement update (IMPORTANT) | больше 1 года назад | |||
ELSA-2023-5362 ELSA-2023-5362: nodejs:18 security, bug fix, and enhancement update (IMPORTANT) | больше 1 года назад | |||
ELSA-2023-5360 ELSA-2023-5360: nodejs:16 security, bug fix, and enhancement update (IMPORTANT) | больше 1 года назад | |||
![]() | SUSE-SU-2023:3408-1 Security update for nodejs14 | почти 2 года назад | ||
![]() | SUSE-SU-2023:3306-1 Security update for nodejs14 | почти 2 года назад | ||
![]() | SUSE-SU-2023:3455-1 Security update for nodejs12 | почти 2 года назад | ||
![]() | ROS-20240916-03 Множественные уязвимости nodejs | CVSS3: 7.5 | 9 месяцев назад |
Уязвимостей на страницу