CVE-2019-5739

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-03/msg00041.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2019-04/msg00046.html · Mailing List
• nodejs.org/en/blog/vulnerability/february-2019-security-releases · Vendor Advisory
• security.gentoo.org/glsa/202003-48 · Third Party Advisory
• security.netapp.com/advisory/ntap-20190502-0008 · Third Party Advisory

node.js のその他の脆弱性

• CVE-2026-111497緊急 9.8悪用確認済み（CISA KEV）A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows…
• CVE-2026-58043高 8.4A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under `--permission`…
• CVE-2026-56850中 4.4A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be…
• CVE-2026-56847中 6.1A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. …
• CVE-2026-48936低 3.3A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permissio…