tocsin

Alpine/nodejs: low 3.7

A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation fails.

Action: Upgrade nodejs to 24.22.1-r0 or later.

Affected

introducedfixedlast affected
024.22.1-r0-

Fixed versions

24.22.1-r0

Sources

published · modified · JSON