{"id":27665,"date":"2024-07-11T15:44:00","date_gmt":"2024-07-11T14:44:00","guid":{"rendered":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/"},"modified":"2024-07-11T15:44:00","modified_gmt":"2024-07-11T14:44:00","slug":"cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info","status":"publish","type":"post","link":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/","title":{"rendered":"CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><strong>New Delhi:<\/strong> The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics &amp; Information Technology, on Thursday, warned users of multiple vulnerabilities in Node.js, which could allow an attacker to compromise the targeted system.\u00a0<\/p>\n<p>The affected software includes Node.js versions prior to 18.20.4 (LTS), 20.15.1 (LTS), and 22.4.1 (Current). &#8220;Multiple vulnerabilities have been reported in Node.js which could be exploited by an attacker to obtain sensitive information, bypass security restrictions and execute arbitrary code on the targeted system,&#8221; said the CERT-In advisory.<\/p>\n<p>According to the cyber agency, these vulnerabilities exist in Node.js due to an inadequate permission model that fails to restrict file stats &#8220;through the fs.lstat API, embedding of non-network imports in data URLs, improper handling of batch files in child_process.spawn\/child_process.spawnSync, an error when the &#8211;allow-fs-write flag is used and improper processing of UNC paths by the Permission Model&#8221;.<\/p>\n<p>Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive information, bypass security restrictions and execute arbitrary code on the targeted system, the agency mentioned. CERT-In advised users to apply appropriate security updates as mentioned by the company.<\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>New Delhi: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics &amp; Information Technology, on Thursday, warned users of multiple vulnerabilities in Node.js, which could allow an attacker to compromise the targeted system.\u00a0 The affected software includes Node.js versions prior to 18.20.4 (LTS), 20.15.1 (LTS), and 22.4.1 (Current). &#8220;Multiple vulnerabilities [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":27666,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg","fifu_image_alt":"","footnotes":""},"categories":[1],"tags":[20263,40722,40721,40723],"class_list":{"0":"post-27665","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-entertainment","8":"tag-cert-in","9":"tag-cert-in-advisory","10":"tag-cyber-agency","11":"tag-cybersecurity-alerts"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info - News Timers<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info - News Timers\" \/>\n<meta property=\"og:description\" content=\"New Delhi: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics &amp; Information Technology, on Thursday, warned users of multiple vulnerabilities in Node.js, which could allow an attacker to compromise the targeted system.\u00a0 The affected software includes Node.js versions prior to 18.20.4 (LTS), 20.15.1 (LTS), and 22.4.1 (Current). &#8220;Multiple vulnerabilities [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/\" \/>\n<meta property=\"og:site_name\" content=\"News Timers\" \/>\n<meta property=\"article:published_time\" content=\"2024-07-11T14:44:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg\" \/><meta property=\"og:image\" content=\"https:\/\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"970\" \/>\n\t<meta property=\"og:image:height\" content=\"545\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"newstimers.com\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"newstimers.com\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/\",\"url\":\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/\",\"name\":\"CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info - News Timers\",\"isPartOf\":{\"@id\":\"https:\/\/newstimers.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/i1.wp.com\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg?w=970&resize=970,545&ssl=1\",\"datePublished\":\"2024-07-11T14:44:00+00:00\",\"author\":{\"@id\":\"https:\/\/newstimers.com\/#\/schema\/person\/eedb09e776755c468967c45aea40c71d\"},\"breadcrumb\":{\"@id\":\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#primaryimage\",\"url\":\"https:\/\/i1.wp.com\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg?w=970&resize=970,545&ssl=1\",\"contentUrl\":\"https:\/\/i1.wp.com\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg?w=970&resize=970,545&ssl=1\",\"width\":970,\"height\":545},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newstimers.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newstimers.com\/#website\",\"url\":\"https:\/\/newstimers.com\/\",\"name\":\"News Timers\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newstimers.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/newstimers.com\/#\/schema\/person\/eedb09e776755c468967c45aea40c71d\",\"name\":\"newstimers.com\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newstimers.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/newstimers.com\/wp-content\/litespeed\/avatar\/eaeb390f9d988b6e37b361c9a0127b35.jpg?ver=1775997915\",\"contentUrl\":\"https:\/\/newstimers.com\/wp-content\/litespeed\/avatar\/eaeb390f9d988b6e37b361c9a0127b35.jpg?ver=1775997915\",\"caption\":\"newstimers.com\"},\"sameAs\":[\"https:\/\/newstimers.com\"],\"url\":\"https:\/\/newstimers.com\/index.php\/author\/newstimers-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info - News Timers","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/","og_locale":"en_US","og_type":"article","og_title":"CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info - News Timers","og_description":"New Delhi: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics &amp; Information Technology, on Thursday, warned users of multiple vulnerabilities in Node.js, which could allow an attacker to compromise the targeted system.\u00a0 The affected software includes Node.js versions prior to 18.20.4 (LTS), 20.15.1 (LTS), and 22.4.1 (Current). &#8220;Multiple vulnerabilities [&hellip;]","og_url":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/","og_site_name":"News Timers","article_published_time":"2024-07-11T14:44:00+00:00","og_image":[{"url":"https:\/\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg","type":"","width":"","height":""},{"width":970,"height":545,"url":"https:\/\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg","type":"image\/jpeg"}],"author":"newstimers.com","twitter_card":"summary_large_image","twitter_image":"https:\/\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg","twitter_misc":{"Written by":"newstimers.com","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/","url":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/","name":"CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info - News Timers","isPartOf":{"@id":"https:\/\/newstimers.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#primaryimage"},"image":{"@id":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#primaryimage"},"thumbnailUrl":"https:\/\/i1.wp.com\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg?w=970&resize=970,545&ssl=1","datePublished":"2024-07-11T14:44:00+00:00","author":{"@id":"https:\/\/newstimers.com\/#\/schema\/person\/eedb09e776755c468967c45aea40c71d"},"breadcrumb":{"@id":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#primaryimage","url":"https:\/\/i1.wp.com\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg?w=970&resize=970,545&ssl=1","contentUrl":"https:\/\/i1.wp.com\/english.cdn.zeenews.com\/sites\/default\/files\/2024\/07\/11\/1437312-untitled-design-2024-07-11t200935.521.jpg?w=970&resize=970,545&ssl=1","width":970,"height":545},{"@type":"BreadcrumbList","@id":"https:\/\/newstimers.com\/index.php\/2024\/07\/11\/cert-in-finds-multiple-bugs-in-node-js-that-can-be-used-to-obtain-sensitive-info\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newstimers.com\/"},{"@type":"ListItem","position":2,"name":"CERT-In Finds Multiple bugs in Node.js That Can Be Used To Obtain Sensitive Info"}]},{"@type":"WebSite","@id":"https:\/\/newstimers.com\/#website","url":"https:\/\/newstimers.com\/","name":"News Timers","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newstimers.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/newstimers.com\/#\/schema\/person\/eedb09e776755c468967c45aea40c71d","name":"newstimers.com","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newstimers.com\/#\/schema\/person\/image\/","url":"https:\/\/newstimers.com\/wp-content\/litespeed\/avatar\/eaeb390f9d988b6e37b361c9a0127b35.jpg?ver=1775997915","contentUrl":"https:\/\/newstimers.com\/wp-content\/litespeed\/avatar\/eaeb390f9d988b6e37b361c9a0127b35.jpg?ver=1775997915","caption":"newstimers.com"},"sameAs":["https:\/\/newstimers.com"],"url":"https:\/\/newstimers.com\/index.php\/author\/newstimers-com\/"}]}},"_links":{"self":[{"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/posts\/27665","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/comments?post=27665"}],"version-history":[{"count":0,"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/posts\/27665\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/media\/27666"}],"wp:attachment":[{"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/media?parent=27665"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/categories?post=27665"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newstimers.com\/index.php\/wp-json\/wp\/v2\/tags?post=27665"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}