{"schema_version":"2","view":"grouped","data":[{"id":58179,"cve_ids":["CVE-2017-14849"],"payload":{"kind":"patch","title":"Path Validation Vulnerability, September 2017","summary":"Node.js 8.5.0 was vulnerable to a path validation issue that could let an attacker access unintended file system paths. The issue was resolved in a new Node.js 8.x release by partially reverting a change.","evidence":"The Node.js project released a new version of 8.x this week which incorporates a security fix.","products":[{"name":{"value":"Node.js","evidence":"Version 8.5.0 of Node.js is vulnerable."},"prerequisites":[],"fixed_versions":[{"value":"8.x","evidence":"The Node.js project released a new version of 8.x this week which incorporates a security fix."}],"affected_versions":[{"value":"8.5.0","evidence":"Version 8.5.0 of Node.js is vulnerable."}]}],"severity":"unknown","fixed_cves":[{"cve":"CVE-2017-14849","product":"Node.js","evidence":"This problem was resolved within Node.js by partially reverting https://github.com/nodejs/node/commit/b98e8d995efb426bbdee56ce503017bdcbbc6332. A CVE has been assigned as CVE-2017-14849"}],"related_cves":[{"value":"CVE-2017-14849","evidence":"A CVE has been assigned as CVE-2017-14849"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:78cbb9e9-8f58-4548-ae4c-ce5b369312b5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/september-2017-path-validation","advisory_id":"78cbb9e9-8f58-4548-ae4c-ce5b369312b5","event_types":["patch"],"published_at":"2026-10-25T17:23:35.163903+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2017-09-29T20:09:00+00:00","detail_url":"/advisories/advisory%3A78cbb9e9-8f58-4548-ae4c-ce5b369312b5","group":{"id":"advisory:78cbb9e9-8f58-4548-ae4c-ce5b369312b5","revision":1,"primary_event_id":57679,"change":"published","superseded_by":[],"changed":{"id":57679,"cve_ids":["CVE-2017-14849"],"payload":{"kind":"patch","title":"Path Validation Vulnerability, September 2017","summary":"Node.js 8.5.0 was vulnerable to a path validation issue that could let an attacker access unintended file system paths. The issue was resolved in a new Node.js 8.x release by partially reverting a change.","evidence":"The Node.js project released a new version of 8.x this week which incorporates a security fix.","products":[{"name":{"value":"Node.js","evidence":"Version 8.5.0 of Node.js is vulnerable."},"prerequisites":[],"fixed_versions":[{"value":"8.x","evidence":"The Node.js project released a new version of 8.x this week which incorporates a security fix."}],"affected_versions":[{"value":"8.5.0","evidence":"Version 8.5.0 of Node.js is vulnerable."}]}],"severity":"unknown","fixed_cves":[{"cve":"CVE-2017-14849","product":"Node.js","evidence":"This problem was resolved within Node.js by partially reverting https://github.com/nodejs/node/commit/b98e8d995efb426bbdee56ce503017bdcbbc6332. A CVE has been assigned as CVE-2017-14849"}],"related_cves":[{"value":"CVE-2017-14849","evidence":"A CVE has been assigned as CVE-2017-14849"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:78cbb9e9-8f58-4548-ae4c-ce5b369312b5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/september-2017-path-validation","advisory_id":"78cbb9e9-8f58-4548-ae4c-ce5b369312b5","event_types":["patch"],"published_at":"2026-10-25T17:23:35.163903+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2017-09-29T20:09:00+00:00","detail_url":"/events/57679"},"members":[{"id":57679,"cve_ids":["CVE-2017-14849"],"payload":{"kind":"patch","title":"Path Validation Vulnerability, September 2017","summary":"Node.js 8.5.0 was vulnerable to a path validation issue that could let an attacker access unintended file system paths. The issue was resolved in a new Node.js 8.x release by partially reverting a change.","evidence":"The Node.js project released a new version of 8.x this week which incorporates a security fix.","products":[{"name":{"value":"Node.js","evidence":"Version 8.5.0 of Node.js is vulnerable."},"prerequisites":[],"fixed_versions":[{"value":"8.x","evidence":"The Node.js project released a new version of 8.x this week which incorporates a security fix."}],"affected_versions":[{"value":"8.5.0","evidence":"Version 8.5.0 of Node.js is vulnerable."}]}],"severity":"unknown","fixed_cves":[{"cve":"CVE-2017-14849","product":"Node.js","evidence":"This problem was resolved within Node.js by partially reverting https://github.com/nodejs/node/commit/b98e8d995efb426bbdee56ce503017bdcbbc6332. A CVE has been assigned as CVE-2017-14849"}],"related_cves":[{"value":"CVE-2017-14849","evidence":"A CVE has been assigned as CVE-2017-14849"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:78cbb9e9-8f58-4548-ae4c-ce5b369312b5","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"nodejs","source_url":"https://nodejs.org/en/blog/vulnerability/september-2017-path-validation","advisory_id":"78cbb9e9-8f58-4548-ae4c-ce5b369312b5","event_types":["patch"],"published_at":"2026-10-25T17:23:35.163903+00:00","technologies":["node-js","nodejs"],"context_update":false,"extraction_method":"llm","source_published_at":"2017-09-29T20:09:00+00:00","detail_url":"/events/57679"}]}}],"next_after":58179,"next_before":58179}