Lucene search

K
redhatcveRedhat.comRH:CVE-2023-32002
HistoryAug 22, 2023 - 7:19 a.m.

CVE-2023-32002

2023-08-2207:19:21
redhat.com
access.redhat.com
135
nodejs
bypassing policy mechanism
security issue
module._load()
cve-2023-32002

0.001 Low

EPSS

Percentile

39.0%

A vulnerability was found in NodeJS. This security issue occurs as the use of Module._load() can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.