Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2026/05/25 10:12 p.m.5 views

Node.js: Permission Model: --allow-fs-read/--allow-fs-write radix-tree prefix-boundary over-grant

A flaw was discovered in the Node.js Permission Model's enforcement of filesystem access control. The vulnerability could allow an attacker granted access to one path to read from or write to paths outside the intended filesystem allowlist, due to issues with the radix-tree prefix-boundary...

7.5CVSS5.9AI score
SaveExploits0
Rows per page
Query Builder