Do Son
A significant security vulnerability has been uncovered in the widely-used node-ip npm package, which is designed to...
Node.js
Server Crash Vulnerability (CVE-2024-27983): This high-severity vulnerability resides within Node.js's HTTP/2 server
CVE-2024-21892 has been identified in how Node.js applications running on Linux handle environment variables under elevated privileges
Alarmingly, this vulnerability is already being exploited in the wild. All HTTP/2 server users in active release lines 18.x and 20.x are susceptible.
CVE-2023-32002 vulnerability allows a remote attacker to bypass security restrictions by using the Module._load() function