tocsin

Debian/nodejs: high 7.5

A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the pol

Action: Upgrade nodejs to 18.19.0+dfsg-6~deb12u1 or later.

Affected

introducedfixedlast affected
018.19.0+dfsg-6~deb12u1-

Fixed versions

18.19.0+dfsg-6~deb12u1

Sources

published · modified · JSON