Alpine/openjdk21: high 7.8
On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only exception of CAP_NET_BIND
Action: Upgrade openjdk21 to 21.0.3_p9-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 21.0.3_p9-r0 | - |
Fixed versions
| 21.0.3_p9-r0 |
Sources
- osv: ALPINE-CVE-2024-21892#Alpine:v3.19/openjdk21
- https://security.alpinelinux.org/vuln/CVE-2024-21892
published · modified · JSON