The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only exception of CAP_NET_BIND_SERVICE. Due to a bug in the implementation of this exception, Node.js incorrectly applies this exception even when certain other capabilities have been set. This allows unprivileged users to inject code that inherits the process's elevated privileges.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade npmUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-packaging | Apr 4, 2024 | Feb 20, 2024 |
| Alpine Linux | — | Upgrade openjdk21Upgrade nodejsUpgrade openjdk17 | Aug 22, 2024 | Feb 20, 2024 |
| Amazon_linux_2023 | — | Upgrade nodejs20-docsUpgrade nodejs20-libsUpgrade nodejs-npmUpgrade nodejs20-npmUpgrade nodejs-debuginfoUpgrade nodejs20-debugsourceUpgrade v8-11.3-develUpgrade nodejs-debugsourceUpgrade nodejs-libs-debuginfoUpgrade nodejs20-full-i18nUpgrade nodejs20-develUpgrade nodejs-docsUpgrade nodejs20-libs-debuginfoUpgrade nodejs-develUpgrade nodejs20Upgrade v8-10.2-develUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs20-debuginfo | Feb 17, 2025 | Feb 16, 2024 |
| Debian | — | Upgrade nodejs | May 15, 2025 | Feb 20, 2024 |
| Freebsd | — | Upgrade node20Upgrade node16Upgrade node21Upgrade nodeUpgrade node18 | Mar 2, 2024 | Mar 1, 2024 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 15, 2025 | Feb 20, 2024 |
| Oracle_linux | — | Upgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejsUpgrade npmUpgrade nodejs-devel | Mar 27, 2024 | Feb 16, 2024 |
| Redhat_linux | — | Upgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-packaging-bundlerUpgrade nodejs-debuginfoUpgrade nodejs-docsUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejsUpgrade nodejs-devel | Mar 27, 2024 | Feb 20, 2024 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejsUpgrade nodejs-debuginfoUpgrade npmUpgrade nodejs-debugsourceUpgrade nodejs-full-i18n | Mar 28, 2024 | Feb 20, 2024 |
| Suse | — | Upgrade nodejs18-develUpgrade corepack20Upgrade nodejs20-docsUpgrade nodejs20Upgrade nodejs20-develUpgrade nodejs18-docsUpgrade corepack18Upgrade npm18Upgrade nodejs18Upgrade npm20 | Feb 29, 2024 | Feb 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 20, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub