Detections
Analytics
CVE-2024-37372
medium
Description
The Permission Model assumes that any path starting with two backslashes \ has a four-character prefix that can be ignored, which is not always true. This subtle bug leads to vulnerable edge cases. This vulnerability affects Windows users of the Node.js Permission Model in version v22.x and v20.x Impact: Thank you, to tniessen for reporting this vulnerability and thank you RafaelGSS for fixing it.