The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-docsUpgrade nodejs-libsUpgrade nodejs-develUpgrade nodejs-packagingUpgrade nodejs-nodemonUpgrade v8-12.4-devel | Feb 20, 2025 | Jan 22, 2025 |
| Alpine Linux | — | Upgrade nodejsUpgrade openjdk21Upgrade openjdk17 | Aug 8, 2025 | Jan 22, 2025 |
| Amazon_linux_2023 | — | Upgrade v8-11.3-develUpgrade nodejs20-develUpgrade nodejs20Upgrade nodejs20-debugsourceUpgrade nodejs20-docsUpgrade nodejs20-npmUpgrade nodejs20-full-i18nUpgrade nodejs20-debuginfoUpgrade nodejs20-libsUpgrade nodejs20-libs-debuginfo | Feb 17, 2025 | Jan 22, 2025 |
| Debian | — | Upgrade nodejs | May 15, 2025 | Jan 22, 2025 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | Jun 13, 2025 | Jan 22, 2025 |
| Oracle_linux | — | Upgrade npmUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-libsUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade v8-12.4-develUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-nodemon | Feb 14, 2025 | Jan 22, 2025 |
| Redhat_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-libs-debuginfoUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade v8-12.4-develUpgrade nodejs-docs | Feb 13, 2025 | Jan 22, 2025 |
| Rocky_linux | — | Upgrade v8-12.4-develUpgrade nodejs-full-i18nUpgrade nodejs-libs-debuginfoUpgrade nodejs-libsUpgrade nodejs-develUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade nodejsUpgrade npm | Feb 14, 2025 | Jan 22, 2025 |
| Suse | — | Upgrade nodejs20-docsUpgrade corepack22Upgrade nodejs20Upgrade npm20Upgrade npm22Upgrade nodejs22-develUpgrade nodejs22Upgrade nodejs22-docsUpgrade corepack20Upgrade nodejs20-devel | Jan 27, 2025 | Jan 22, 2025 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jan 22, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 22, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub