The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejs-nodemonUpgrade nodejs-packagingUpgrade nodejs-docsUpgrade nodejs-develUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-packaging-bundlerUpgrade npm | Aug 28, 2024 | Jul 9, 2024 |
| Alpine Linux | — | Upgrade nodejs | Aug 22, 2024 | Jul 9, 2024 |
| Amazon_linux_2023 | — | Upgrade nodejs20-libs-debuginfoUpgrade nodejs20-develUpgrade v8-11.3-develUpgrade nodejs20-full-i18nUpgrade nodejs20-docsUpgrade nodejs20Upgrade nodejs20-debuginfoUpgrade nodejs20-libsUpgrade nodejs20-npmUpgrade nodejs20-debugsource | Feb 17, 2025 | Jul 9, 2024 |
| Debian | — | Upgrade nodejs | May 15, 2025 | Jul 9, 2024 |
| Gentoo Linux | — | Upgrade net-libs/nodejs. | May 15, 2025 | Jul 9, 2024 |
| Oracle_linux | — | Upgrade nodejs-develUpgrade nodejs-nodemonUpgrade nodejs-docsUpgrade npmUpgrade nodejs-packagingUpgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade nodejs-full-i18n | Oct 16, 2024 | Jul 9, 2024 |
| Redhat_linux | — | Upgrade nodejs-debuginfoUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs-debugsourceUpgrade nodejsUpgrade nodejs-docsUpgrade npmUpgrade nodejs-nodemonUpgrade nodejs-develUpgrade nodejs-full-i18n | Sep 13, 2024 | Jul 9, 2024 |
| Rocky_linux | — | Upgrade npmUpgrade nodejs-debuginfoUpgrade nodejsUpgrade nodejs-debugsourceUpgrade nodejs-develUpgrade nodejs-full-i18n | Sep 17, 2024 | Jul 9, 2024 |
| Suse | — | Upgrade npm20Upgrade nodejs20-develUpgrade nodejs22Upgrade nodejs18Upgrade nodejs22-develUpgrade corepack20Upgrade npm18Upgrade corepack18Upgrade nodejs18-docsUpgrade npm22Upgrade nodejs20Upgrade nodejs20-docsUpgrade nodejs22-docsUpgrade corepack22Upgrade nodejs18-devel | Jul 17, 2024 | Jul 9, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 9, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub