An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejsUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade npmUpgrade nodejs-libsUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade nodejs-packaging | Apr 21, 2023 | Feb 23, 2023 |
| Alpine Linux | — | Upgrade nodejs | Mar 26, 2024 | Feb 23, 2023 |
| Amazon_linux_2023 | — | Upgrade nodejs-full-i18nUpgrade nodejs-libs-debuginfoUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-docsUpgrade nodejsUpgrade nodejs-debuginfoUpgrade v8-develUpgrade npm | Feb 17, 2025 | Feb 16, 2023 |
| Centos_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-libs-debuginfoUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-debugsourceUpgrade nodejs-libsUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade npmUpgrade nodejs-docsUpgrade nodejs-full-i18n | Apr 10, 2023 | Feb 23, 2023 |
| Debian | — | Upgrade nodejs | Feb 27, 2023 | Feb 23, 2023 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-libsUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packaging | Apr 5, 2023 | Feb 16, 2023 |
| Redhat_linux | — | Upgrade nodejs-debuginfoUpgrade npmUpgrade nodejsUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs-develUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-libs-debuginfo | Apr 3, 2023 | Feb 23, 2023 |
| Rocky_linux | — | Upgrade nodejs-develUpgrade nodejs-libs-debuginfoUpgrade nodejs-libsUpgrade nodejs-debugsourceUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-full-i18nUpgrade nodejs | Mar 5, 2024 | Feb 23, 2023 |
| Suse | — | Upgrade nodejs18Upgrade nodejs10Upgrade nodejs12Upgrade npm12Upgrade corepack16Upgrade nodejs16Upgrade nodejs10-docsUpgrade nodejs18-docsUpgrade nodejs16-develUpgrade npm18Upgrade nodejs12-develUpgrade nodejs14-docsUpgrade npm16Upgrade nodejs16-docsUpgrade corepack18Upgrade nodejs18-develUpgrade corepack14Upgrade nodejs14-develUpgrade npm14Upgrade nodejs12-docsUpgrade nodejs10-develUpgrade nodejs14Upgrade npm10 | Mar 6, 2023 | Feb 23, 2023 |
| Ubuntu | — | Upgrade libnode64Upgrade libnode108Upgrade libnode72Upgrade nodejs | Mar 5, 2024 | Feb 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub