tocsin

Alpine/nodejs: high 8.8

The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.

Action: Upgrade nodejs to 18.17.1-r0 or later.

Affected

introducedfixedlast affected
018.17.1-r0-

Fixed versions

18.17.1-r0

Sources

published · modified · JSON