3316 matches found
UBUNTU-CVE-2026-56847
A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...
UBUNTU-CVE-2026-58043
A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...
CVE-2026-56847
A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...
CVE-2026-56847
A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...
EUVD-2026-51022
A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and...
EUVD-2026-51021
A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...
EUVD-2026-51017
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
CVE-2026-58040
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
CVE-2026-58040
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...
PT-2026-66407
Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in the Permission Model enforcement allows the trace events.createTracing.enable function to write trace logs outside the boundaries defined by the...
Linux Distros Unpatched Vulnerability : CVE-2026-56847
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to...
PT-2026-66408
Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in the Node.js HTTPS Agent connection reuse mechanism can lead to PFX object-array key collisions. This issue allows mutual TLS mTLS client identities to be...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs22: nodejs22-22.23.2-2.3.hum1 aarch64, x8664 nodejs22-bin-22.23.2-2.3.hum1 noarch nodejs22-devel-22.23.2-2.3.hum1 aarch64, x8664 nodejs22-docs-22.23.2-2.3.hum1 noarch...
CVE-2022-34970
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:06+00:00| seen| https://t.me/CVEhub/854 2026-07-30 00:01:46+00:00| seen| https://t.me/CVEhub/854 2026-08-01 07:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/854 2026-08-02 00:01:13+00:00| published-proof-of-concept|...
CVE-2022-20142
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:02+00:00| seen| https://t.me/CVEhub/1826 2026-07-30 00:01:42+00:00| seen| https://t.me/CVEhub/1826 2026-08-01 05:00:05+00:00| published-proof-of-concept| https://t.me/CVEhub/1826 2026-08-02 00:01:15+00:00| published-proof-of-concept|...
CVE-2022-21954
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3791 2026-07-30 00:01:36+00:00| seen| https://t.me/CVEhub/3791...
CVE-2022-41220
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:45+00:00| seen| https://t.me/CVEhub/9011 2026-07-30 00:01:16+00:00| seen| https://t.me/CVEhub/9011 2026-07-31 12:00:04+00:00| published-proof-of-concept| https://t.me/CVEhub/9011 2026-08-01 00:00:32+00:00| published-proof-of-concept|...
CVE-2022-20347
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:42+00:00| seen| https://t.me/CVEhub/10060 2026-07-29 12:01:00+00:00| seen| https://t.me/CVEhub/2499 2026-07-30 00:01:11+00:00| seen| https://t.me/CVEhub/10060 2026-07-30 00:01:39+00:00| seen| https://t.me/CVEhub/2499 2026-07-31...