1 matches found
AZL-35046 CVE-2024-21891 affecting package nodejs for versions less than 20.14.0-1
Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack. This vulnerability affects all users using the experiment...
8.8CVSS6.7AI score0.01245EPSS
SaveExploits0References1
20