https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:33:45 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-56847 <p><strong>Affected:</strong> Alpaquita:25: nodejs, Alpaquita:stream: nodejs, BellSoft Hardened Containers:25: nodejs, BellSoft Hardened Containers:stream: nodejs</p> <p><strong>Affected:</strong> Alpaquita:25: nodejs, Alpaquita:stream: nodejs, BellSoft Hardened Containers:25: nodejs, BellSoft Hardened Containers:stream: nodejs</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-56847 https://cve.radiocsirt.org/vuln/bit-node-2026-56847 <p><strong>Affected:</strong> Bitnami: node</p> <p>A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</p> <p><strong>Affected:</strong> Bitnami: node</p> <p>A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</p> https://cve.radiocsirt.org/vuln/bit-node-2026-56847 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0947 certfr-2026-avi-0947 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0947 https://cve.radiocsirt.org/vuln/cleanstart-2026-cd76085 <p><strong>Affected:</strong> CleanStart: nodejs</p> <p>Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: nodejs</p> <p>Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-cd76085 https://cve.radiocsirt.org/vuln/euvd-2026-342588 EUVD-2026-342588 https://cve.radiocsirt.org/vuln/euvd-2026-342588 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56847 <p>A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</p> <p>A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56847 https://cve.radiocsirt.org/vuln/ghsa-hw7r-7v27-7388 <p>A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`.</p> <p>This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.</p> <p>This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</p> <p>A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`.</p> <p>This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.</p> <p>This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</p> https://cve.radiocsirt.org/vuln/ghsa-hw7r-7v27-7388 https://cve.radiocsirt.org/vuln/msrc_cve-2026-56847 msrc_CVE-2026-56847 https://cve.radiocsirt.org/vuln/msrc_cve-2026-56847 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11439-1 <p>corepack24-24.18.1-1.1 on GA media</p> <p>corepack24-24.18.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11439-1 https://cve.radiocsirt.org/vuln/rhsa-2026:48273 <p>undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing undici: undici: HTTP header injection via unvalidated blob-like body type property undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length undici: Undici: Cookie attribute injection allows bypassing security protections nodejs: Node.js: Permission Model flaw allows trace logs to bypass filesystem write restrictions nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw nodejs: Information disclosure due to improper permission enforcement nodejs: HTTPS Agent TLS session reuse skips hostname verification nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw</p> <p>undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives undici: undici: Cross-user information disclosure due to improper Cache-Control directive parsing undici: undici: HTTP header injection via unvalidated blob-like body type property undici: undici: Response desynchronization via retry interceptor with mismatched Content-Length undici: Undici: Cookie attribute injection allows bypassing security protections nodejs: Node.js: Permission Model flaw allows trace logs to bypass filesystem write restrictions nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw nodejs: Information disclosure due to improper permission enforcement nodejs: HTTPS Agent TLS session reuse skips hostname verification nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw</p> https://cve.radiocsirt.org/vuln/rhsa-2026:48273 https://cve.radiocsirt.org/vuln/suse-su-2026:23130-1 <p>Security update for nodejs22</p> <p>Security update for nodejs22</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23130-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56847 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:Pro:20.04:LTS: nodejs, Ubuntu:Pro:22.04:LTS: nodejs, Ubuntu:24.04:LTS: nodejs, Ubuntu:26.04:LTS: nodejs</p> <p>A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:Pro:20.04:LTS: nodejs, Ubuntu:Pro:22.04:LTS: nodejs, Ubuntu:24.04:LTS: nodejs, Ubuntu:26.04:LTS: nodejs</p> <p>A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56847 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2585 <p>Ein Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Dateien zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2585