Количество 34
Количество 34
CVE-2024-22020
A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.
CVE-2024-22020
A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.
CVE-2024-22020
A security flaw in Node.js allows a bypass of network import restrict ...
GHSA-q793-mj5v-wh68
A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file.
BDU:2024-05685
Уязвимость компонента Permission Model программной платформы Node.js, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
GHSA-ch4x-f5c4-36gv
A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.
BDU:2024-06867
Уязвимость программной платформы Node.js, связанная с неправильным контролем доступа, позволяющая нарушителю выполнить произвольный код
ROS-20240904-05
Уязвимость nodejs
RLSA-2024:6148
Moderate: nodejs:18 security update
RLSA-2024:6147
Moderate: nodejs:18 security update
ELSA-2024-6148
ELSA-2024-6148: nodejs:18 security update (MODERATE)
ELSA-2024-6147
ELSA-2024-6147: nodejs:18 security update (MODERATE)
SUSE-SU-2024:2542-1
Security update for nodejs18
SUSE-SU-2024:2496-1
Security update for nodejs18
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22020 A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers. | CVSS3: 6.5 | 1% Низкий | около 2 лет назад |
 | CVE-2024-22020 A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers. | CVSS3: 6.5 | 1% Низкий | больше 1 года назад |
| CVE-2024-22020 A security flaw in Node.js allows a bypass of network import restrict ... | CVSS3: 6.5 | 1% Низкий | около 2 лет назад |
| GHSA-q793-mj5v-wh68 A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a "read-only" file descriptor to change the owner and permissions of a file. | CVSS3: 3.3 | 0% Низкий | почти 2 года назад |
 | BDU:2024-05685 Уязвимость компонента Permission Model программной платформы Node.js, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации | CVSS3: 3.9 | 0% Низкий | больше 2 лет назад |
| GHSA-ch4x-f5c4-36gv A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers. | CVSS3: 6.5 | 1% Низкий | около 2 лет назад |
| BDU:2024-06867 Уязвимость программной платформы Node.js, связанная с неправильным контролем доступа, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.5 | 1% Низкий | около 2 лет назад |
 | ROS-20240904-05 Уязвимость nodejs | CVSS3: 6.5 | 1% Низкий | почти 2 года назад |
 | RLSA-2024:6148 Moderate: nodejs:18 security update | почти 2 года назад | ||
| RLSA-2024:6147 Moderate: nodejs:18 security update | почти 2 года назад | ||
| ELSA-2024-6148 ELSA-2024-6148: nodejs:18 security update (MODERATE) | почти 2 года назад | ||
| ELSA-2024-6147 ELSA-2024-6147: nodejs:18 security update (MODERATE) | почти 2 года назад | ||
 | SUSE-SU-2024:2542-1 Security update for nodejs18 | около 2 лет назад | ||
| SUSE-SU-2024:2496-1 Security update for nodejs18 | около 2 лет назад |
Уязвимостей на страницу