UnratedFix available
Node.js 20.15.1 (LTS)
Node.js 20.15.1 is a security release addressing several vulnerabilities involving network import restrictions and the permission model.
Announced Group revision 1
Original source ↗nodejs
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
This is a security release.
Node.js
Node.js 20.15.1 (LTS)
- Affected versions
- Not stated in this extraction
- Fixed versions
- 20.15.1
Version 20.15.1 'Iron' (LTS)
- Prerequisites
- Not stated in this extraction
- Related CVEs
- CVE-2024-36138
CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High)
CVE-2024-22020CVE-2024-22020 - Bypass network import restriction via data URL (Medium)
CVE-2024-22018CVE-2024-22018 - fs.lstat bypasses permission model (Low)
CVE-2024-36137CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low)
CVE-2024-37372CVE-2024-37372 - Permission model improperly processes UNC paths (Low)
Publisher severity
No explicit severity was extracted.
- Event
- #22944 · Revision 1
- Added to Heist Feed
- Publisher date