An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-develUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-libsUpgrade nodejs-packaging-bundlerUpgrade nodejs-packaging | Apr 21, 2023 | Feb 23, 2023 |
| Alpine Linux | — | Upgrade nodejs | Mar 26, 2024 | Feb 23, 2023 |
| Amazon_linux_2023 | — | Upgrade nodejs-develUpgrade nodejs-docsUpgrade nodejs-libsUpgrade nodejs-libs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-full-i18nUpgrade nodejsUpgrade npmUpgrade v8-develUpgrade nodejs-debuginfo | Feb 17, 2025 | Feb 16, 2023 |
| Centos_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-libs-debuginfoUpgrade nodejs-packaging-bundlerUpgrade nodejs-debugsourceUpgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-libsUpgrade nodejs-docsUpgrade npmUpgrade nodejs-full-i18n | Apr 10, 2023 | Feb 23, 2023 |
| Debian | — | Upgrade nodejs | Feb 27, 2023 | Feb 23, 2023 |
| Oracle_linux | — | Upgrade npmUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-libs | Apr 5, 2023 | Feb 16, 2023 |
| Redhat_linux | — | Upgrade nodejsUpgrade npmUpgrade nodejs-packaging-bundlerUpgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-libsUpgrade nodejs-libs-debuginfo | Apr 3, 2023 | Feb 23, 2023 |
| Rocky_linux | — | Upgrade npmUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-libsUpgrade nodejs-libs-debuginfoUpgrade nodejs-develUpgrade nodejs-debugsource | Mar 5, 2024 | Feb 23, 2023 |
| Suse | — | Upgrade nodejs18-develUpgrade corepack18Upgrade corepack14Upgrade nodejs10-develUpgrade nodejs14Upgrade npm16Upgrade nodejs16-docsUpgrade npm10Upgrade nodejs14-develUpgrade npm14Upgrade nodejs12-docsUpgrade nodejs10Upgrade nodejs12-develUpgrade nodejs18-docsUpgrade nodejs16Upgrade nodejs18Upgrade npm12Upgrade nodejs14-docsUpgrade nodejs10-docsUpgrade corepack16Upgrade nodejs12Upgrade npm18Upgrade nodejs16-devel | Mar 6, 2023 | Feb 23, 2023 |
| Ubuntu | — | Upgrade libnode64Upgrade libnode72Upgrade nodejsUpgrade libnode108 | Mar 5, 2024 | Feb 23, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub