Vulnerabilities in Node.js and libuv
Correcting releases of the Node.js server JavaScript platform 21.6.2, 20.11.1, and 18.19.1 are available, which fix 8 vulnerabilities, 4 of which are assigned a high danger level: CVE-2024-21892 — a vulnerability allowing an unprivileged user to inject code that inherits elevated privileges under which the process runs. This vulnerability is caused by an error in the exception handling implementation that allows an unprivileged user to manipulate environment variables in a privilege-escalated process. Exception […]
