tocsin

Alpine/nodejs: high 7.5

A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the pol

Action: Upgrade nodejs to 18.17.1-r0 or later.

Affected

introducedfixedlast affected
018.17.1-r0-

Fixed versions

18.17.1-r0

Sources

published · modified · JSON