Various node:fs functions allow specifying paths as either strings or Uint8Array objects. In Node.js environments, the Buffer class extends the Uint8Array class. Node.js prevents path traversal through strings (see CVE-2023-30584) and Buffer objects (see CVE-2023-32004), but not through non-Buffer Uint8Array objects. References: https://nodejs.org/en/blog/vulnerability/october-2023-security-releases
Created nodejs tracking bugs for this issue: Affects: epel-7 [bug 2244452] Affects: fedora-37 [bug 2244459] Created nodejs16 tracking bugs for this issue: Affects: fedora-38 [bug 2244454] Created nodejs18 tracking bugs for this issue: Affects: fedora-38 [bug 2244456] Created nodejs20 tracking bugs for this issue: Affects: fedora-38 [bug 2244453] Created nodejs:13/nodejs tracking bugs for this issue: Affects: epel-8 [bug 2244461] Created nodejs:14/nodejs tracking bugs for this issue: Affects: fedora-37 [bug 2244458] Created nodejs:16-epel/nodejs tracking bugs for this issue: Affects: epel-8 [bug 2244460] Created nodejs:16/nodejs tracking bugs for this issue: Affects: fedora-38 [bug 2244455] Created nodejs:18/nodejs tracking bugs for this issue: Affects: fedora-37 [bug 2244457]
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2023:7205 https://access.redhat.com/errata/RHSA-2023:7205
Created nodejs tracking bugs for this issue: Affects: epel-7 [bug 2258564] Created nodejs20 tracking bugs for this issue: Affects: fedora-38 [bug 2258565]
It's amazing! Your article is very good and very useful to us! Thank you so much for taking the time to share with us! Have a good time with https://unoonlinegame.io free.