[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-23918":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":70,"related":71,"reserved_at":9,"published_at":83,"modified_at":84,"state":85,"summary":86,"references_raw":95,"kevs":107,"epss":108,"epss_history":111,"metrics":378,"affected":386},"CVE-2023-23918","A privilege escalation vulnerability exists in Node.js \u003C19.6.1, \u003C18.14.1, \u003C16.19.1 and \u003C14.21.3 that made it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in Node.js and access non authorized modules by using process.mainModule.require(). This only affects users who had enabled the experimental permissions option with --experimental-policy.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.","weakness","Incomplete","Class","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68],{"_key":25},"ALPINE-CVE-2023-23918",{"_key":27},"SUSE-SU-2023:0673-1",{"_key":29},"UBUNTU-CVE-2023-23918",{"_key":31},"SUSE-SU-2023:0607-1",{"_key":33},"SUSE-SU-2023:0609-1",{"_key":35},"SUSE-SU-2023:0715-1",{"_key":37},"SUSE-SU-2023:0608-1",{"_key":39},"SUSE-SU-2023:0674-1",{"_key":41},"SUSE-SU-2023:0738-1",{"_key":43},"SUSE-SU-2023:3455-1",{"_key":45},"OPENSUSE-SU-2024:12725-1",{"_key":47},"OPENSUSE-SU-2024:12726-1",{"_key":49},"DSA-5589-1",{"_key":51},"MGASA-2023-0078",{"_key":53},"DEBIAN-CVE-2023-23918",{"_key":55},"RHSA-2023:1533",{"_key":57},"RHSA-2023:1582",{"_key":59},"RHSA-2023:1583",{"_key":61},"RHSA-2023:1742",{"_key":63},"RHSA-2023:1743",{"_key":65},"RHSA-2023:1744",{"_key":67},"RHSA-2023:2654",{"_key":69},"RHSA-2023:2655",[],[72,73,74,75,76,77,78,79,80,81,82],{"_key":27},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":51},"2023-02-23T00:00:00.000Z","2025-05-08T16:15:23.012Z","Modified",{"cisa_kev":87,"cisa_ransomware":87,"cisa_vendor":9,"epss_severity":88,"epss_score":89,"severity":90,"severity_score":91,"severity_version":92,"severity_source":93,"severity_vector":94,"severity_status":85},false,"low",0.0002,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",[96,103],{"url":97,"sources":98,"tags":100},"https://nodejs.org/en/blog/vulnerability/february-2023-security-releases/",[93,99],"nvd",[101,102],"Patch","Vendor Advisory",{"url":104,"sources":105,"tags":106},"https://security.netapp.com/advisory/ntap-20230316-0008/",[93,99],[],[],{"date":109,"score":89,"percentile":110},"2026-06-04",0.05851,[112,116,119,122,125,128,131,134,137,140,143,146,149,152,155,159,162,165,168,172,175,178,181,184,187,190,193,195,199,202,205,208,211,214,217,220,223,226,229,232,235,237,240,243,246,249,252,255,258,261,263,266,269,272,275,277,279,282,284,287,290,293,296,299,302,305,307,310,313,316,319,322,325,327,330,333,336,339,342,345,348,351,354,357,360,363,366,369,371,374],{"date":113,"score":114,"percentile":115},"2025-11-04",0.00019,0.03642,{"date":117,"score":114,"percentile":118},"2025-11-05",0.03645,{"date":120,"score":114,"percentile":121},"2025-11-06",0.03681,{"date":123,"score":114,"percentile":124},"2025-11-07",0.03686,{"date":126,"score":114,"percentile":127},"2025-11-08",0.03695,{"date":129,"score":114,"percentile":130},"2025-11-09",0.03698,{"date":132,"score":114,"percentile":133},"2025-11-10",0.03679,{"date":135,"score":114,"percentile":136},"2025-11-11",0.03712,{"date":138,"score":114,"percentile":139},"2025-11-12",0.03733,{"date":141,"score":114,"percentile":142},"2025-11-13",0.03765,{"date":144,"score":114,"percentile":145},"2025-11-14",0.03771,{"date":147,"score":114,"percentile":148},"2025-11-15",0.03806,{"date":150,"score":114,"percentile":151},"2025-11-16",0.03804,{"date":153,"score":114,"percentile":154},"2025-11-17",0.03792,{"date":156,"score":157,"percentile":158},"2025-11-18",0.00143,0.29081,{"date":160,"score":157,"percentile":161},"2025-11-19",0.29102,{"date":163,"score":157,"percentile":164},"2025-11-20",0.29118,{"date":166,"score":114,"percentile":167},"2025-11-21",0.03883,{"date":169,"score":170,"percentile":171},"2025-11-22",0.00018,0.03348,{"date":173,"score":170,"percentile":174},"2025-11-23",0.03345,{"date":176,"score":170,"percentile":177},"2025-11-24",0.03325,{"date":179,"score":170,"percentile":180},"2025-11-25",0.03319,{"date":182,"score":170,"percentile":183},"2025-11-26",0.03326,{"date":185,"score":170,"percentile":186},"2025-11-27",0.03339,{"date":188,"score":170,"percentile":189},"2025-11-28",0.03341,{"date":191,"score":170,"percentile":192},"2025-11-29",0.03386,{"date":194,"score":170,"percentile":192},"2025-11-30",{"date":196,"score":197,"percentile":198},"2025-12-01",0.00014,0.01755,{"date":200,"score":197,"percentile":201},"2025-12-02",0.01752,{"date":203,"score":197,"percentile":204},"2025-12-03",0.01756,{"date":206,"score":170,"percentile":207},"2025-12-04",0.03428,{"date":209,"score":170,"percentile":210},"2025-12-05",0.03466,{"date":212,"score":170,"percentile":213},"2025-12-06",0.03481,{"date":215,"score":170,"percentile":216},"2025-12-07",0.03485,{"date":218,"score":170,"percentile":219},"2025-12-08",0.03482,{"date":221,"score":170,"percentile":222},"2025-12-09",0.03509,{"date":224,"score":170,"percentile":225},"2025-12-10",0.0355,{"date":227,"score":170,"percentile":228},"2025-12-11",0.03541,{"date":230,"score":170,"percentile":231},"2025-12-12",0.03549,{"date":233,"score":170,"percentile":234},"2025-12-13",0.03552,{"date":236,"score":170,"percentile":234},"2025-12-14",{"date":238,"score":170,"percentile":239},"2025-12-15",0.03537,{"date":241,"score":170,"percentile":242},"2025-12-16",0.03558,{"date":244,"score":170,"percentile":245},"2025-12-17",0.03579,{"date":247,"score":248,"percentile":174},"2025-12-18",0.00017,{"date":250,"score":248,"percentile":251},"2025-12-19",0.03332,{"date":253,"score":248,"percentile":254},"2025-12-20",0.03334,{"date":256,"score":248,"percentile":257},"2025-12-21",0.03354,{"date":259,"score":248,"percentile":260},"2025-12-22",0.03336,{"date":262,"score":248,"percentile":171},"2025-12-23",{"date":264,"score":248,"percentile":265},"2025-12-24",0.03343,{"date":267,"score":170,"percentile":268},"2025-12-25",0.03593,{"date":270,"score":170,"percentile":271},"2025-12-26",0.03588,{"date":273,"score":170,"percentile":274},"2025-12-27",0.03602,{"date":276,"score":170,"percentile":271},"2025-12-28",{"date":278,"score":170,"percentile":245},"2025-12-29",{"date":280,"score":170,"percentile":281},"2025-12-30",0.03563,{"date":283,"score":170,"percentile":242},"2025-12-31",{"date":285,"score":197,"percentile":286},"2026-01-01",0.02138,{"date":288,"score":197,"percentile":289},"2026-01-02",0.02136,{"date":291,"score":197,"percentile":292},"2026-01-03",0.0214,{"date":294,"score":170,"percentile":295},"2026-01-04",0.03515,{"date":297,"score":170,"percentile":298},"2026-01-05",0.03499,{"date":300,"score":170,"percentile":301},"2026-01-06",0.03491,{"date":303,"score":170,"percentile":304},"2026-01-07",0.03516,{"date":306,"score":170,"percentile":228},"2026-01-08",{"date":308,"score":170,"percentile":309},"2026-01-09",0.03551,{"date":311,"score":170,"percentile":312},"2026-01-10",0.03556,{"date":314,"score":170,"percentile":315},"2026-01-11",0.03538,{"date":317,"score":170,"percentile":318},"2026-01-12",0.0354,{"date":320,"score":170,"percentile":321},"2026-01-13",0.03536,{"date":323,"score":170,"percentile":324},"2026-01-14",0.03547,{"date":326,"score":170,"percentile":298},"2026-01-15",{"date":328,"score":170,"percentile":329},"2026-01-16",0.03483,{"date":331,"score":170,"percentile":332},"2026-01-17",0.03486,{"date":334,"score":170,"percentile":335},"2026-01-18",0.03464,{"date":337,"score":170,"percentile":338},"2026-01-19",0.03443,{"date":340,"score":170,"percentile":341},"2026-01-20",0.03435,{"date":343,"score":170,"percentile":344},"2026-01-21",0.03423,{"date":346,"score":170,"percentile":347},"2026-01-22",0.03427,{"date":349,"score":170,"percentile":350},"2026-01-23",0.03475,{"date":352,"score":170,"percentile":353},"2026-01-24",0.03503,{"date":355,"score":170,"percentile":356},"2026-01-25",0.03484,{"date":358,"score":170,"percentile":359},"2026-01-26",0.03469,{"date":361,"score":114,"percentile":362},"2026-01-27",0.04098,{"date":364,"score":114,"percentile":365},"2026-01-28",0.0408,{"date":367,"score":114,"percentile":368},"2026-01-29",0.04095,{"date":370,"score":114,"percentile":362},"2026-01-30",{"date":372,"score":114,"percentile":373},"2026-01-31",0.04081,{"date":375,"score":376,"percentile":377},"2026-02-01",0.00016,0.02753,[379,384],{"source":93,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":380,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":381,"vectorString":94,"impactScore":382,"exploitabilityScore":383},"HIGH",6,10,{"source":99,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":385,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":381,"vectorString":94,"impactScore":382,"exploitabilityScore":383},[387,459],{"ecosystem":9,"name":388,"vendor":389,"product":388,"cpe_part":390,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":391},"node","nodejs","a",[392,399,403,407,411,415,419,423,427,431,435,439,443,447,451,455],{"version":393,"is_range":394,"range_type":93,"version_start":395,"version_start_type":396,"version_end":397,"version_end_type":398,"fixed_in":9},">= 4.0, \u003C 4.*",true,"4.0","including","4.*","excluding",{"version":400,"is_range":394,"range_type":93,"version_start":401,"version_start_type":396,"version_end":402,"version_end_type":398,"fixed_in":9},">= 5.0, \u003C 5.*","5.0","5.*",{"version":404,"is_range":394,"range_type":93,"version_start":405,"version_start_type":396,"version_end":406,"version_end_type":398,"fixed_in":9},">= 6.0, \u003C 6.*","6.0","6.*",{"version":408,"is_range":394,"range_type":93,"version_start":409,"version_start_type":396,"version_end":410,"version_end_type":398,"fixed_in":9},">= 7.0, \u003C 7.*","7.0","7.*",{"version":412,"is_range":394,"range_type":93,"version_start":413,"version_start_type":396,"version_end":414,"version_end_type":398,"fixed_in":9},">= 8.0, \u003C 8.*","8.0","8.*",{"version":416,"is_range":394,"range_type":93,"version_start":417,"version_start_type":396,"version_end":418,"version_end_type":398,"fixed_in":9},">= 9.0, \u003C 9.*","9.0","9.*",{"version":420,"is_range":394,"range_type":93,"version_start":421,"version_start_type":396,"version_end":422,"version_end_type":398,"fixed_in":9},">= 10.0, \u003C 10.*","10.0","10.*",{"version":424,"is_range":394,"range_type":93,"version_start":425,"version_start_type":396,"version_end":426,"version_end_type":398,"fixed_in":9},">= 11.0, \u003C 11.*","11.0","11.*",{"version":428,"is_range":394,"range_type":93,"version_start":429,"version_start_type":396,"version_end":430,"version_end_type":398,"fixed_in":9},">= 12.0, \u003C 12.*","12.0","12.*",{"version":432,"is_range":394,"range_type":93,"version_start":433,"version_start_type":396,"version_end":434,"version_end_type":398,"fixed_in":9},">= 13.0, \u003C 13.*","13.0","13.*",{"version":436,"is_range":394,"range_type":93,"version_start":437,"version_start_type":396,"version_end":438,"version_end_type":398,"fixed_in":9},">= 14.0, \u003C 14.21.3","14.0","14.21.3",{"version":440,"is_range":394,"range_type":93,"version_start":441,"version_start_type":396,"version_end":442,"version_end_type":398,"fixed_in":9},">= 15.0, \u003C 15.*","15.0","15.*",{"version":444,"is_range":394,"range_type":93,"version_start":445,"version_start_type":396,"version_end":446,"version_end_type":398,"fixed_in":9},">= 16.0, \u003C 16.19.1","16.0","16.19.1",{"version":448,"is_range":394,"range_type":93,"version_start":449,"version_start_type":396,"version_end":450,"version_end_type":398,"fixed_in":9},">= 17.0, \u003C 17.*","17.0","17.*",{"version":452,"is_range":394,"range_type":93,"version_start":453,"version_start_type":396,"version_end":454,"version_end_type":398,"fixed_in":9},">= 18.0, \u003C 18.14.1","18.0","18.14.1",{"version":456,"is_range":394,"range_type":93,"version_start":457,"version_start_type":396,"version_end":458,"version_end_type":398,"fixed_in":9},">= 19.0, \u003C 19.6.1","19.0","19.6.1",{"ecosystem":9,"name":460,"vendor":389,"product":460,"cpe_part":390,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":461},"node.js",[462,467,469,473,475,479,481],{"version":463,"is_range":394,"range_type":464,"version_start":465,"version_start_type":396,"version_end":466,"version_end_type":396,"fixed_in":9},"gte14.0.0_lte14.14.0","cpe","14.0.0","14.14.0",{"version":468,"is_range":394,"range_type":464,"version_start":465,"version_start_type":396,"version_end":438,"version_end_type":398,"fixed_in":9},"gte14.0.0_lt14.21.3",{"version":470,"is_range":394,"range_type":464,"version_start":471,"version_start_type":396,"version_end":472,"version_end_type":396,"fixed_in":9},"gte16.0.0_lte16.12.0","16.0.0","16.12.0",{"version":474,"is_range":394,"range_type":464,"version_start":471,"version_start_type":396,"version_end":446,"version_end_type":398,"fixed_in":9},"gte16.0.0_lt16.19.1",{"version":476,"is_range":394,"range_type":464,"version_start":477,"version_start_type":396,"version_end":478,"version_end_type":396,"fixed_in":9},"gte18.0.0_lte18.11.0","18.0.0","18.11.0",{"version":480,"is_range":394,"range_type":464,"version_start":477,"version_start_type":396,"version_end":454,"version_end_type":398,"fixed_in":9},"gte18.0.0_lt18.14.1",{"version":482,"is_range":394,"range_type":464,"version_start":483,"version_start_type":396,"version_end":458,"version_end_type":398,"fixed_in":9},"gte19.0.0_lt19.6.1","19.0.0"]