Descripción
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|
| nodejs |
node |
22.22.3 – ≤ 22.22.3, 24.16.0 – ≤ 24.16.0, 26.3.0 – ≤ 26.3.0 |
|
| nodejs |
node.js |
22.0.0 – ≤ 22.22.3 |
|
Coincidencias CPE (NVD) (3)
cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* ≥ 22.0.0 ≤ 22.22.3cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* ≥ 24.0.0 ≤ 24.16.0cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:* ≥ 26.0.0 ≤ 26.3.0
