Поиск уязвимостей
Количество 26
Количество 26
BDU:2023-04953
Уязвимость модуля Module._load() программной платформы Node.js, позволяющая нарушителю обойти введенные ограничения безопасности
ALT-PU-2023-6858
ALT-PU-2023-6858: package `node` update to version 18.18.2-alt1
ROS-20240916-03
Множественные уязвимости nodejs
CVE-2023-32002
The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
CVE-2023-32002
The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
CVE-2023-32002
The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
CVE-2023-32002
HackerOne: CVE-2023-32002 Node.js `Module._load()` policy Remote Code Execution Vulnerability
CVE-2023-32002
The use of `Module._load()` can bypass the policy mechanism and requir ...
ALT-PU-2025-2007
ALT-PU-2025-2007: package `node` update to version 16.20.3-alt1
GHSA-9m48-r3w4-x35v
The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
SUSE-SU-2023:3400-1
Security update for nodejs16
SUSE-SU-2023:3379-1
Security update for nodejs16
SUSE-SU-2023:3378-1
Security update for nodejs18
SUSE-SU-2023:3356-1
Security update for nodejs18
SUSE-SU-2023:3355-1
Security update for nodejs16
RLSA-2023:5532
Important: nodejs security and bug fix update
ELSA-2023-5532
ELSA-2023-5532: nodejs security and bug fix update (IMPORTANT)
RLSA-2023:5363
Important: nodejs:18 security, bug fix, and enhancement update
RLSA-2023:5362
Important: nodejs:18 security, bug fix, and enhancement update
RLSA-2023:5360
Important: nodejs:16 security, bug fix, and enhancement update
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-04953 Уязвимость модуля Module._load() программной платформы Node.js, позволяющая нарушителю обойти введенные ограничения безопасности | CVSS3: 7.5 | 2% Низкий | больше 3 лет назад |
| ALT-PU-2023-6858 ALT-PU-2023-6858: package `node` update to version 18.18.2-alt1 | CVSS3: 9.8 | около 3 лет назад | |
 | ROS-20240916-03 Множественные уязвимости nodejs | CVSS3: 7.5 | около 2 лет назад | |
 | CVE-2023-32002 The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. | CVSS3: 9.8 | 2% Низкий | около 3 лет назад |
 | CVE-2023-32002 The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. | CVSS3: 8.1 | 2% Низкий | больше 3 лет назад |
 | CVE-2023-32002 The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. | CVSS3: 9.8 | 2% Низкий | около 3 лет назад |
 | CVE-2023-32002 HackerOne: CVE-2023-32002 Node.js `Module._load()` policy Remote Code Execution Vulnerability | 2% Низкий | больше 1 года назад | |
| CVE-2023-32002 The use of `Module._load()` can bypass the policy mechanism and requir ... | CVSS3: 9.8 | 2% Низкий | около 3 лет назад |
| ALT-PU-2025-2007 ALT-PU-2025-2007: package `node` update to version 16.20.3-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| GHSA-9m48-r3w4-x35v The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js. | CVSS3: 9.8 | 2% Низкий | около 3 лет назад |
 | SUSE-SU-2023:3400-1 Security update for nodejs16 | около 3 лет назад | ||
| SUSE-SU-2023:3379-1 Security update for nodejs16 | около 3 лет назад | ||
| SUSE-SU-2023:3378-1 Security update for nodejs18 | около 3 лет назад | ||
| SUSE-SU-2023:3356-1 Security update for nodejs18 | около 3 лет назад | ||
| SUSE-SU-2023:3355-1 Security update for nodejs16 | около 3 лет назад | ||
 | RLSA-2023:5532 Important: nodejs security and bug fix update | около 3 лет назад | ||
| ELSA-2023-5532 ELSA-2023-5532: nodejs security and bug fix update (IMPORTANT) | около 3 лет назад | ||
| RLSA-2023:5363 Important: nodejs:18 security, bug fix, and enhancement update | около 3 лет назад | ||
| RLSA-2023:5362 Important: nodejs:18 security, bug fix, and enhancement update | 11 месяцев назад | ||
| RLSA-2023:5360 Important: nodejs:16 security, bug fix, and enhancement update | 11 месяцев назад |
Уязвимостей на страницу