Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Node.js may run malicious code

published 1 month ago

Summary

The Node.js software package can be tricked into executing unwanted code, which could let an attacker affect your applications. Updating to a newer version of Node.js removes this risk. Make sure your systems are running the latest released version.

What to do

Update cleanstart nodejs to version 10.16.3-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	nodejs	< 10.16.3-r0 Fix: upgrade to 10.16.3-r0

Original advisory text

Security fix for CVE-2019-9518 applied in: nodejs 10.16.3-r0

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2019-9518 URL
https://nvd.nist.gov/vuln/detail/CVE-2019-9518 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-BZ30025 · OSV

Track software like this

Free during beta