Node.js Remote Code Execution Vulnerability

Impact

• Remote Code Execution

System / Technologies affected

• Node.js versions prior to 18.20.2 (LTS)
• Node.js versions prior to 20.12.2 (LTS)
• Node.js versions prior to 21.7.3 (Current)

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Update to Node.js version 18.20.2 (LTS)
• Update to Node.js version 20.12.2 (LTS)
• Update to Node.js version 21.7.3 (Current)

Vulnerability Identifier

• CVE-2024-27980

Source

• nodejs

Related Link

• https://nodejs.org/en/blog/release/v18.20.2
• https://nodejs.org/en/blog/release/v20.12.2
• https://nodejs.org/en/blog/release/v21.7.3