https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:37:51 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10621 bdu:2025-10621 https://cve.radiocsirt.org/vuln/bdu:2025-10621 https://cve.radiocsirt.org/vuln/bit-node-2025-23084 <p><strong>Affected:</strong> Bitnami: node</p> <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API.</p> <p><strong>Affected:</strong> Bitnami: node</p> <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API.</p> https://cve.radiocsirt.org/vuln/bit-node-2025-23084 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0060 certfr-2025-avi-0060 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0060 https://cve.radiocsirt.org/vuln/euvd-2026-259934 EUVD-2026-259934 https://cve.radiocsirt.org/vuln/euvd-2026-259934 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23084 <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API.</p> <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-23084 https://cve.radiocsirt.org/vuln/ghsa-37v4-cwgp-x353 <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory.</p> <p>On Windows, a path that does not start with the file separator is treated as relative to the current directory.</p> <p>This vulnerability affects Windows users of `path.join` API.</p> <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory.</p> <p>On Windows, a path that does not start with the file separator is treated as relative to the current directory.</p> <p>This vulnerability affects Windows users of `path.join` API.</p> https://cve.radiocsirt.org/vuln/ghsa-37v4-cwgp-x353 https://cve.radiocsirt.org/vuln/msrc_cve-2025-23084 msrc_CVE-2025-23084 https://cve.radiocsirt.org/vuln/msrc_cve-2025-23084 https://cve.radiocsirt.org/vuln/oesa-2025-1090 <p><strong>Affected:</strong> openEuler:24.03-LTS: nodejs</p> <p>Node.js is a platform built on Chrome&amp;amp;apos;s JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices. Security Fix(es):</p> <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory.</p> <p>On Windows, a path that does not start with the file separator is treated as relative to the current directory.</p> <p>This vulnerability affects Windows users of `path.join` API.(CVE-2025-23084)</p> <p>A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions.</p> <p>This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.(CVE-2025-23085)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: nodejs</p> <p>Node.js is a platform built on Chrome&amp;amp;apos;s JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices. Security Fix(es):</p> <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory.</p> <p>On Windows, a path that does not start with the file separator is treated as relative to the current directory.</p> <p>This vulnerability affects Windows users of `path.join` API.(CVE-2025-23084)</p> <p>A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions.</p> <p>This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.(CVE-2025-23085)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1090 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-23084 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:20.04:LTS: nodejs, Ubuntu:22.04:LTS: nodejs, Ubuntu:24.10: nodejs, Ubuntu:24.04:LTS: nodejs, Ubuntu:25.04: nodejs</p> <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:20.04:LTS: nodejs, Ubuntu:22.04:LTS: nodejs, Ubuntu:24.10: nodejs, Ubuntu:24.04:LTS: nodejs, Ubuntu:25.04: nodejs</p> <p>A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-23084 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0156 <p>Ein Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben, einen Denial-of-Service-Zustand herbeizuführen oder nicht näher spezifizierte Angriffe zu starten.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben, einen Denial-of-Service-Zustand herbeizuführen oder nicht näher spezifizierte Angriffe zu starten.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0156