Debian/nodejs: high 7.8
On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only exception of CAP_NET_BIND
Action: Upgrade nodejs to 18.19.1+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 18.19.1+dfsg-1 | - |
Fixed versions
| 18.19.1+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2024-21892#Debian:14/nodejs
- https://security-tracker.debian.org/tracker/CVE-2024-21892
published · modified · JSON