Close Menu
    Tags
    ai apple BJP cg news Champions Trophy 2025 Chhattisgarh Chhattisgarh News china Congress cricket donald trump elon musk featured google Hindi News Hindustan India ind vs eng IPL IPL 2024 IPL 2025 Israel Israel Hamas War Jammu and Kashmir latest news Lok Sabha elections 2024 Madhya Pradesh Madhya Pradesh news market Narendra Modi News in Hindi Pahalgam Terror Attack Pakistan pm modi Rahul Gandhi Raipur Rohit Sharma samsung Supreme court T20 World Cup 2024 Team India the chhattisgarh United States Virat Kohli whatsapp
    Facebook X (Twitter) Instagram
    Facebook X (Twitter) Instagram YouTube
    The Chhattisgarh
    Member Login
    • World
    • India
    • Chhattisgarh
    • Madhya Pradesh
    • Sports
    • Technology
    The Chhattisgarh
    Home»Technology»CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info |
    Technology

    CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info |

    The ChhattisgarhBy The ChhattisgarhJuly 11, 20241 Min Read
    Share
    Facebook Twitter LinkedIn Pinterest Email Copy Link

    New Delhi: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, on Thursday, warned users of multiple vulnerabilities in Node.js, which could allow an attacker to compromise the targeted system. 

    The affected software includes Node.js versions prior to 18.20.4 (LTS), 20.15.1 (LTS), and 22.4.1 (Current). “Multiple vulnerabilities have been reported in Node.js which could be exploited by an attacker to obtain sensitive information, bypass security restrictions and execute arbitrary code on the targeted system,” said the CERT-In advisory.

    According to the cyber agency, these vulnerabilities exist in Node.js due to an inadequate permission model that fails to restrict file stats “through the fs.lstat API, embedding of non-network imports in data URLs, improper handling of batch files in child_process.spawn/child_process.spawnSync, an error when the –allow-fs-write flag is used and improper processing of UNC paths by the Permission Model”.

    Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information, bypass security restrictions and execute arbitrary code on the targeted system, the agency mentioned. CERT-In advised users to apply appropriate security updates as mentioned by the company.

    Cert-In CERT-In Advisory Cyber agency Cybersecurity Alerts
    Share. Facebook Twitter Pinterest LinkedIn Tumblr Email Copy Link

    Related Posts

    Does Your AC Have An Expiry Date, And How Long Should You Use It? Here’s When You Should Replace It |

    May 25, 2025

    IRCTC Launches New Mobile App ‘SwaRail’ For Android And iOS Users: Check Features And How To Book Railway Tickets |

    May 25, 2025

    “Made In India” iPhones Will Still Be Cheaper In US, Even With Trump’s 25% Tariff: GTRI Report |

    May 25, 2025

    X (Formerly Twitter) Down: Thousands Report Major Outage On Elon Musk’s Platform |

    May 24, 2025

    Apple iPhone 17 Series: Tipped For September Launch: Check Expected Specs, And Prices In India, US, And Dubai |

    May 24, 2025

    Oppo A5x 5G Launched In India With AI Features Under Rs 15,000; Check Camera, Battery, Specs And Launch Offers |

    May 24, 2025
    -Advertisement-
    Advertisement
    Stay In Touch
    • Facebook
    • Twitter
    • Pinterest
    • Instagram
    • YouTube
    • Vimeo
    © 2025 The Chhattisgarh. All Rights Reserved.
    • Contact Us
    • About Us
    • Terms & Conditions
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.