Vulnerabilites collected today, Thursday 5/3 - Meterian: Daily Vulnerabilities

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Node.js Allow Command Injection and Symlink Traversal Recent vulnerabilities in Node.js have been identified, including a critical symlink traversal issue and a command injection vulnerability. The CVSS scores for these vulnerabilities are 9.5 and 8.0 respectively, indicating significant risk for affected systems. Organizations using Node.js should prioritize addressing these vulnerabilities to mitigate potential exploitation. 1 sources 64