← All advisories

High severity7.5NVD Advisory· Published Jul 18, 2025· Updated Apr 15, 2026

CVE-2025-27210

CVE-2025-27210

Description

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX.

This vulnerability affects Windows users of path.join API.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Node.js/Node.jsllm-fuzzy
osv-coords2 versions
pkg:bitnami/node pkg:bitnami/node-min
>= 4.0.0, < 20.19.4+ 1 more
- (no CPE)range: >= 4.0.0, < 20.19.4
- (no CPE)range: >= 4.0.0, < 20.19.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.