| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | ≥ 10.0.0, < 10.22.1≥ 12.0.0, < 12.18.4≥ 14.0.0, < 14.9.0 | 10.22.112.18.414.9.0 |
The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free