Astra Linux – vulnerability in Node.js

A OS command injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, and 19.0.1. This vulnerability stems from insufficient checks on allowed hosts; it can be easily bypassed since IsIPAddress fails to properly validate whether an IP address is invalid prior to making DBS...