Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
added 4 days ago6 views

CVE-2026-48617

A flaw was found in Node.js. This vulnerability allows a bypass of the Permission Model enforcement due to path misvalidation within the process.report.writeReport function. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access to...

2.9CVSS5.9AI score0.0024EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/07/26 6:57 p.m.7 views

nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation

A flaw was found in Node.js. This vulnerability allows a bypass of the Permission Model enforcement due to path misvalidation within the process.report.writeReport function. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access to...

1.8CVSS5.9AI score0.0024EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/25 11:19 p.m.4 views

nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation

A flaw was found in Node.js. This vulnerability allows a bypass of the Permission Model enforcement due to path misvalidation within the process.report.writeReport function. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access to...

1.8CVSS5.9AI score0.0024EPSS
SaveExploits0References6
OSV
OSV
added 2026/06/23 2:50 p.m.15 views

BIT-NODE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

1.8CVSS5.9AI score0.0024EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/06/18 5:18 p.m.15 views

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass via the process.report.writeReport function. An attacker can bypass intended security restrictions by exploiting path misvalidation. Note: This is only exploitable if the Node.js Permission Model is enabled and...

3.1CVSS5.4AI score0.0024EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/18 5:16 p.m.18 views

CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

1.8CVSS0.0024EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/06/18 4:21 p.m.11 views

CVE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

1.8CVSS5.8AI score0.0024EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/18 4:21 p.m.16 views

EUVD-2026-37914

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

1.8CVSS4.7AI score0.0024EPSS
SaveExploits0References2
Rows per page
Query Builder