Descrição
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
CVSS 1.8EPSS 0.24%Risco 0.18
Ver fonte- Publicação
- 2026-06-18 17:16:31
- Vetor
- CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N