12 matches found
CVE-2023-32559
CVE-2023-32559 describes a privilege-escalation vulnerability in Node.js via the experimental policy mechanism. The attack leverages the deprecated API process.binding(), potentially bypassing policy.json and abusing process.binding('spawn_sync') to run arbitrary code outside policy limits. The i...
CVE-2023-32002
CVE-2023-32002 concerns Node.js where the policy mechanism (experimental) can be bypassed via Module._load() , allowing modules outside policy.json. The CVE affects all supported lines using the experimental policy (Node.js 16.x, 18.x, 20.x). Connected advisories confirm affected packages as Node...
CVE-2023-32006
CVE-2023-32006 affects Node.js when using the experimental policy mechanism (supported in 16.x, 18.x, 20.x). The root cause is that module.constructor.createRequire() can bypass policy and load modules outside policy.json. Multiple advisories reference the vulnerability alongside other policy-rel...
CVE-2023-30590
CVE-2023-30590 concerns Node.js: the generateKeys() API of crypto.createDiffieHellman() only generates a private key when none is set, yet docs claim it generates both private and public DH keys. Multiple advisories (Debian DLA/DSA, Gentoo GLSA, AlmaLinux errata) reference this vulnerability and ...
CVE-2023-30589
CVE-2023-30589 – Node.js (llhttp CRLF handling) – Technical summary The llhttp parser in Node.js’ http module does not strictly use CRLF to delimit HTTP header fields, potentially allowing HTTP Request Smuggling. The CR character alone (without LF) can delimit headers, contrary to RFC7230 which r...
CVE-2023-30588
CVE-2023-30588 affects Node.js across v16, v18, and v20 where creating an x509 certificate with an invalid public key causes a non-exception termination, leading to DoS by interrupting application processing when reading certificate public key info. Connected sources confirm this vulnerability ac...
CVE-2023-30581
CVE-2023-30581 : The issue arises from using proto in process.mainModule.proto .require(), which can bypass the experimental policy mechanism and allow requiring modules outside policy.json. It affects Node.js policy-experiment users across all active release lines (v16, v18, v20). The root cause...
CVE-2023-30585
CVE-2023-30585 affects Node.js on Windows when installed via the .msi installer and only during the repair operation. The msiexec.exe process, running as NT AUTHORITY\SYSTEM, reads the %USERPROFILE% value from the current user’s registry and, if the referenced path does not exist, creates the pat...
CVE-2023-23918
CVE-2023-23918 affects Node.js runtimes prior to certain fixed releases (examples from connected docs include Node.js 14.21.3, 16.19.1, 18.14.2; some entries reference 18.19.x as fixed). The vulnerability allows bypassing the experimental Permissions feature when enabled with --experimental-polic...
CVE-2023-23920
CVE-2023-23920 is an untrusted search path vulnerability in Node.js that can allow ICU data loading when run with elevated privileges. The initial entry specifies affected versions as <19.6.1, <18.14.1, <16.19.1, and
CVE-2023-23919
CVE-2023-23919 is a Node.js OpenSSL error handling vulnerability where the OpenSSL error stack may not be cleared after certain cryptographic operations, potentially enabling a denial of service on affected threads. Concrete details across connected docs show affected versions include Node.js rel...