mirror of
https://github.com/nodejs/node.git
synced 2026-11-09 15:11:11 -05:00
RafaelGSS
8512434d2b
This is a security release. Notable changes: * CVE-2024-36138 - Bypass incomplete fix of CVE-2024-27980 (High) * CVE-2024-22020 - Bypass network import restriction via data URL (Medium) * CVE-2024-22018 - fs.lstat bypasses permission model (Low) * CVE-2024-36137 - fs.fchown/fchmod bypasses permission model (Low) * CVE-2024-37372 - Permission model improperly processes UNC paths (Low) PR-URL: https://github.com/nodejs-private/node-private/pull/617