CVE-2023-26045
1 advisory.
npm/nodebb CVE-2023-26045: critical 10
Path traversal and code execution via prototype vulnerability
Action: Upgrade nodebb to 2.8.7 or later.
npm i nodebb@2.8.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.5.0 | 2.8.7 | - |
Fixed versions
| 2.8.7 |
Sources
- osv: GHSA-vh2g-6c4x-5hmp
- https://github.com/NodeBB/NodeBB/security/advisories/GHSA-vh2g-6c4x-5hmp
- https://nvd.nist.gov/vuln/detail/CVE-2023-26045
- https://github.com/NodeBB/NodeBB/commit/ec58700f6dff8e5b4af1544f6205ec362b593092
- https://github.com/NodeBB/NodeBB
- https://security.netapp.com/advisory/ntap-20230831-0004
CVE-2023-26045 · published · modified · JSON