Unrated
Node.js Test CI Security Incident
A TOCTOU vulnerability allowed code from pull requests to be executed on Node.js CI hosts. The project secured and rebuilt affected infrastructure and updated CI workflows. The incident did not affect the Node.js runtime; users do not need to take action.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
The reported issue did not impact the Node.js runtime and there is no risk to users of Node.js. No action by Node.js users is required.
Node.js Test CI
Node.js Test CI Security Incident
- Affected versions
- Not stated in this extraction
- Fixed versions
- Not stated in this extraction
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #21662 · Revision 1
- Added to Heist Feed
- Publisher date