Read the docs
Red Hat Security Advisory

RHSA-2025:1522

nodejs:20 security update

Released 2025-02-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

TI-2025-16879 CVE-2025-23083 · GHSA-wv7p-rjf3-9fr5

Improper access control in NodeJS Node

Priority LOW 36

With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created.

CVSS 3.0HIGH 7.7 Local No auth No interaction EPSS 0.00422 Published 2025-01-22 Partial fix · 20.18.2, 22.13.1 +1 CWE-284