The use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outside of the policy.json definition. Affects Node.js v16, v18, v20 experimental policy
Reporter | Title | Published | Views | Family All 122 |
---|---|---|---|---|
![]() | CVE-2023-30581 | 23 Nov 202300:00 | – | ubuntucve |
![]() | CVE-2023-30581 | 23 Nov 202300:15 | – | alpinelinux |
![]() | BIT-node-2023-30581 | 6 Mar 202411:01 | – | osv |
![]() | CGA-HR5V-2CJC-4H99 | 6 Jun 202412:26 | – | osv |
![]() | CGA-438W-PV6V-P6MH | 6 Jun 202412:22 | – | osv |
![]() | CGA-HCGF-3834-FVF4 | 6 Jun 202412:27 | – | osv |
![]() | BIT-NODE-MIN-2023-30581 | 16 Dec 202414:00 | – | osv |
![]() | Moderate: nodejs:18 security, bug fix, and enhancement update | 8 Aug 202300:00 | – | osv |
![]() | Moderate: nodejs:18 security, bug fix, and enhancement update | 6 Oct 202323:10 | – | osv |
![]() | Moderate: nodejs security, bug fix, and enhancement update | 31 Jul 202300:00 | – | osv |
Source | Link |
---|---|
nodejs | www.nodejs.org/en/blog/vulnerability/june-2023-security-releases |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo