EUVD-2026-123678

A Permission Model bypass in Node.js recursive file watching discloses the names of files and directories the process is not permitted to read. On macOS and Windows, fs.watch and fs.promises.watch in recursive mode are backed by the native libuv watcher: FSEventWrap::Start checks kFileSystemRead...

CVE-2026-123829

A Permission Model bypass in Node.js recursive file watching discloses the names of files and directories the process is not permitted to read. On macOS and Windows, fs.watch and fs.promises.watch in recursive mode are backed by the native libuv watcher: FSEventWrap::Start checks kFileSystemRead...