Node.js Test CI Security Incident
A TOCTOU vulnerability allowed code from pull requests to be executed on Node.js CI hosts. The project secured and rebuilt affected infrastructure and updated CI workflows. The incident did not affect the Node.js runtime; users do not need to take action.
Announced
Machine-extracted · Revision 1Original source
Evidence and details
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The reported issue did not impact the Node.js runtime and there is no risk to users of Node.js. No action by Node.js users is required.
Node.js Test CI
Node.js Test CI Security Incident
- Affected versions
- Not stated in this extraction
- Fixed versions
- Not stated in this extraction
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.