1 matches found
CVE-2024-21890
CVE-2024-21890 affects Node.js where the experimental Permission Model mishandles wildcards in --allow-fs-read/--allow-fs-write, allowing access beyond the intended path due to improper path traversal sanitization. Affected are Node.js 20/21 with the experimental permission model; mitigation is t...
6.5CVSS4.7AI score0.00945EPSS
SaveExploits0References3Affected Software1
20