tocsin

Alpine/nodejs: high 7.5

A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the pol

Action: Upgrade nodejs to 16.20.2-r0 or later.

Affected

introducedfixedlast affected
016.20.2-r0-

Fixed versions

16.20.2-r0

Sources

published · modified · JSON