Created attachment 1973402 [details] twistlock.png User noticed Twistlock logs claim nodejs 18 is affected by issue as shown in the attached file. Checking what should be related patch https://github.com/nodejs/node/pull/47335/commits/84ad3bc7b8ddbe57a718ea1467a21f48a3505619 it does not apply to nodejs 18, and in comment https://github.com/nodejs/node/pull/47335#issuecomment-1593912485 it appears to make it clear the issue does not apply to nodejs 18, as it is a nodejs 20 feature. Can you please confirm the log is incorrect? Actual software in use is UBI_BASE_IMAGE="registry.access.redhat.com/ubi8/nodejs-18-minimal" ubi image nodejs-18-minimal
Michael, can you take a look to confirm node 18 is not affected?
Taking a look this, the code in question never made it into any official release. The permissions model was only release in 20.x and the deny api was removed before that release. Therefore it does not affect 18.x since it does not include the permission model. Note it also does not affect 20.x since it was not part of the initial release of the permission model as well.
Thanks! Closing this bug then.