Alpine/nodejs: critical 9.8

The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.

Action: Upgrade nodejs to 16.20.2-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2023-32002#Alpine:v3.16/nodejs
• https://security.alpinelinux.org/vuln/CVE-2023-32002

published 2023-08-21T17:15:47Z · modified 2026-10-23T17:17:56.730723445Z · JSON