AZL-35899 CVE-2024-22017 affecting package nodejs for versions less than 20.14.0-1
setuid does not affect libuv's internal iouring operations if initialized before the call to setuid. This allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid. This vulnerability affects all users using version greater or...