8 matches found
CLEANSTART-2026-SR40385 Security fix for CVE-2026-58039 applied in: nodejs 26.5.0-r0
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
K000162984: Node.js vulnerabilities CVE-2026-58039 and CVE-2026-58040
Security Advisory Description CVE-2026-58039 A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This...
A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
...
CVE-2026-58039
A flaw was found in Node.js. The permission model enforcement, specifically related to process.report functionality, allows an attacker to write or overwrite files in locations outside of the intended secure paths. This vulnerability can lead to the disclosure of sensitive information or bypass t...
corepack24-24.18.1-1.1 on GA media (moderate)
corepack24-24.18.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11439-1 Rating: moderate Cross-References: CVE-2026-56846 CVE-2026-56847 CVE-2026-56848 CVE-2026-56850 CVE-2026-58039 CVE-2026-58040 CVE-2026-58041 CVE-2026-58042 CVE-2026-58043 CVE-2026-58044 CVE-2026-58045 CVSS scores:...
CVE-2026-58039
creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:37+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260730 2026-07-30 14:15:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrumtyo7h22j...
Linux Distros Unpatched Vulnerability : CVE-2026-58039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentialit...
