Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-48617 →
ALPINE-CVE-2026-48617
A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality i...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport() Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.21
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.23.0-r0"}]}]
Alpine:v3.22
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.23.0-r0"}]}]
Alpine:v3.23
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.17.0-r0"}]}]
Alpine:v3.24
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.17.0-r0"}]}]
Références
- advisory security.alpinelinux.org