2 matches found
AZL-94340 CVE-2026-56847 affecting package nodejs for versions less than 24.18.1-1
A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...
6.1CVSS6.2AI score0.00158EPSS
SaveExploits0References1
CVE-2026-56847
A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...
6.1CVSS5.8AI score0.00158EPSS
SaveExploits0
20