CVE-2024-21892

The CVE-2024-21892 vulnerability affects Node.js on Linux where environment-variable handling with elevated privileges is mishandled due to a buggy exemption; unprivileged users could inject code inheriting the process’s privileges. Connected advisories note Node.js updates/fixes in multiple dist...

CVE-2024-22019

CVE-2024-22019 affects Node.js HTTP servers. The vulnerability arises from reading an unbounded number of bytes from a single connection due to unbounded chunk extension bytes in chunked encoding, enabling resource exhaustion and DoS. Impact: CPU and network bandwidth exhaustion, bypassing timeou...