CVE-2026-56847

A flaw in the Node.js Permission Model allows traceevents.createTracing.enable to bypass --allow-fs-write restrictions and write trace logs outside intended paths, potentially leading to unauthorized information disclosure. Mitigation Avoid using the traceevents.createTracing.enable function in...