https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:42:17 +0000 https://vulnerability.circl.lu/vuln/cve-2023-32002 <p><strong>Affected:</strong> NodeJS Node, nodejs</p> <p>The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.</p> <p>This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x.</p> <p>Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.</p> <p><strong>Affected:</strong> NodeJS Node, nodejs</p> <p>The use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.</p> <p>This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x.</p> <p>Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.</p> https://vulnerability.circl.lu/vuln/cve-2023-32002 https://vulnerability.circl.lu/vuln/usn-6822-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: nodejs</p> <p>It was discovered that Node.js incorrectly handled certain inputs when it is using the policy mechanism. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to bypass the policy mechanism. (CVE-2023-32002, CVE-2023-32006)</p> <p>It was discovered that Node.js incorrectly handled certain inputs when it is using the policy mechanism. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform a privilege escalation. (CVE-2023-32559)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: nodejs</p> <p>It was discovered that Node.js incorrectly handled certain inputs when it is using the policy mechanism. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to bypass the policy mechanism. (CVE-2023-32002, CVE-2023-32006)</p> <p>It was discovered that Node.js incorrectly handled certain inputs when it is using the policy mechanism. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to perform a privilege escalation. (CVE-2023-32559)</p> https://vulnerability.circl.lu/vuln/usn-6822-1