Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly module itself does not have access to, similar to as if the WebAssembly module was a JavaScript module.
This vulnerability affects users of any active release line of Node.js. The vulnerable feature is only available if Node.js is started with the `--experimental-wasm-modules` command line option.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade npmUpgrade nodejs-packagingUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade nodejs | Oct 23, 2023 | Oct 18, 2023 |
| Alpine Linux | — | Upgrade nodejs-currentUpgrade nodejs | Oct 1, 2024 | Sep 7, 2024 |
| Amazon_linux_2023 | — | Upgrade nodejs-full-i18nUpgrade nodejs-npmUpgrade nodejs-libs-debuginfoUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade v8-10.2-develUpgrade nodejsUpgrade nodejs-debuginfoUpgrade nodejs-libsUpgrade nodejs-devel | Feb 17, 2025 | Oct 13, 2023 |
| Centos_linux | — | Upgrade nodejs-packagingUpgrade npmUpgrade nodejs-full-i18nUpgrade nodejs-nodemonUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-docsUpgrade nodejs-debugsourceUpgrade nodejs-packaging-bundlerUpgrade nodejs-devel | Nov 1, 2023 | Oct 18, 2023 |
| Debian | — | Upgrade nodejs | Jan 3, 2024 | Jan 3, 2024 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 15, 2025 | Sep 7, 2024 |
| Oracle_linux | — | Upgrade nodejs-docsUpgrade npmUpgrade nodejs-develUpgrade nodejs-packaging-bundlerUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade nodejs-nodemon | Jul 22, 2024 | Oct 13, 2023 |
| Redhat_linux | — | Upgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-full-i18nUpgrade nodejs-packaging-bundlerUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejsNo solution existsUpgrade npmUpgrade nodejs-debuginfoUpgrade nodejs-nodemon | Nov 1, 2023 | Oct 18, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Nov 28, 2023 |
| Suse | — | Upgrade nodejs18-develUpgrade corepack16Upgrade nodejs18-docsUpgrade nodejs16-develUpgrade nodejs18Upgrade nodejs16Upgrade npm18Upgrade npm16Upgrade nodejs16-docsUpgrade corepack18 | Oct 23, 2023 | Oct 19, 2023 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 7, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub