Skip to content
This repository was archived by the owner on Sep 21, 2025. It is now read-only.

Commit 02885b7

Browse files
committed
Automatic github actions updates. Changes found @lightswitch05
1 parent 4853274 commit 02885b7

3 files changed

Lines changed: 6 additions & 6 deletions

File tree

docs/rules-v1.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"lastUpdatedDate": "2025-03-28T13:32:51.038Z",
2+
"lastUpdatedDate": "2025-03-29T02:34:07.732Z",
33
"name": "Node Version Audit",
44
"website": "https://github.com/lightswitch05/node-version-audit",
55
"license": "https://github.com/lightswitch05/node-version-audit/blob/master/LICENSE",
@@ -5459,7 +5459,7 @@
54595459
"id": "CVE-2024-21891",
54605460
"baseScore": 8.8,
54615461
"publishedDate": "2024-02-20T02:15:00.000Z",
5462-
"lastModifiedDate": "2025-02-12T15:08:00.000Z",
5462+
"lastModifiedDate": "2025-03-28T19:15:00.000Z",
54635463
"description": "Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack.\nThis vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21.\nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js."
54645464
},
54655465
"CVE-2024-21892": {
@@ -5529,7 +5529,7 @@
55295529
"id": "CVE-2024-27982",
55305530
"baseScore": null,
55315531
"publishedDate": "2024-05-07T17:15:00.000Z",
5532-
"lastModifiedDate": "2024-11-21T09:05:00.000Z",
5532+
"lastModifiedDate": "2025-03-28T21:15:00.000Z",
55335533
"description": "The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling. Specifically, if a space is placed before a content-length header, it is not interpreted correctly, enabling attackers to smuggle in a second request within the body of the first."
55345534
},
55355535
"CVE-2024-27983": {

package-lock.json

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "node-version-audit",
3-
"version": "1.20250328.1",
3+
"version": "1.20250329.0",
44
"description": "Audit your Node version for known CVEs and patches ",
55
"main": "index.js",
66
"scripts": {

0 commit comments

Comments
 (0)