rpm package
almalinux/v8-13.6-devel
pkg:rpm/almalinux/v8-13.6-devel
Vulnerabilities (41)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-55130 | Cri | 9.1 | < 3:13.6.233.17-1.24.13.0.0.module_el8.10.0+4113+bc863bc2 | 3:13.6.233.17-1.24.13.0.0.module_el8.10.0+4113+bc863bc2 | Jan 20, 2026 | A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and |
- affected < 3:13.6.233.17-1.24.13.0.0.module_el8.10.0+4113+bc863bc2fixed 3:13.6.233.17-1.24.13.0.0.module_el8.10.0+4113+bc863bc2
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and
Page 3 of 3