Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Node.js 12.18.0 can be tricked to run code

published 1 month ago

Summary

The Node.js version 12.18.0 package contains a weakness that could let an attacker cause the program to execute unwanted code on your system. This could lead to unauthorized actions or data exposure. Upgrade to a newer Node.js release as soon as possible to eliminate the risk.

What to do

Update cleanstart nodejs to version 12.18.0-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	nodejs	< 12.18.0-r0 Fix: upgrade to 12.18.0-r0

Original advisory text

Security fix for CVE-2020-8174 applied in: nodejs 12.18.0-r0

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2020-8174 URL
https://nvd.nist.gov/vuln/detail/CVE-2020-8174 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-WM34737 · OSV

Track software like this

Free during beta