Debian/nodejs: critical 9.8

The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental po

Action: Upgrade nodejs to 18.19.0+dfsg-6~deb12u1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2023-32002
• https://security-tracker.debian.org/tracker/CVE-2023-32002

published 2023-08-21T17:15:47Z · modified 2026-10-26T18:00:57.634512530Z · JSON