https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:20:16 +0000 https://cve.radiocsirt.org/vuln/cve-2023-30587 <p><strong>Affected:</strong> NodeJS Node, nodejs</p> <p>A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using the built-in inspector module (node:inspector).</p> <p>By exploiting the Worker class&#39;s ability to create an &#34;internal worker&#34; with the kIsInternal Symbol, attackers can modify the isInternal value when an inspector is attached within the Worker constructor before initializing a new WorkerImpl. This vulnerability exclusively affects Node.js users employing the permission model mechanism.</p> <p>Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.</p> <p><strong>Affected:</strong> NodeJS Node, nodejs</p> <p>A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using the built-in inspector module (node:inspector).</p> <p>By exploiting the Worker class&#39;s ability to create an &#34;internal worker&#34; with the kIsInternal Symbol, attackers can modify the isInternal value when an inspector is attached within the Worker constructor before initializing a new WorkerImpl. This vulnerability exclusively affects Node.js users employing the permission model mechanism.</p> <p>Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.</p> https://cve.radiocsirt.org/vuln/cve-2023-30587