[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2023-32559":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":271,"aliases":281,"duplicate_of":9,"upstream":282,"downstream":283,"duplicates":328,"related":329,"reserved_at":9,"published_at":348,"modified_at":349,"state":350,"summary":351,"references_raw":359,"kevs":374,"epss":375,"epss_history":378,"metrics":649,"affected":657},"CVE-2023-32559","A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. The use of the deprecated API `process.binding()` can bypass the policy mechanism by requiring internal modules and eventually take advantage of `process.binding('spawn_sync')` run arbitrary code, outside of the limits defined in a `policy.json` file. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":25,"capec":26},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","weakness","Draft","Class","Medium",[27,189,267],{"id":28,"name":29,"techniques":30},"CAPEC-122","Privilege Abuse",[31],{"id":32,"name":33,"tactics":34,"countermeasures":41},"T1548","Abuse Elevation Control Mechanism",[35,38],{"id":36,"name":37},"TA0030","Defense Evasion",{"id":39,"name":40},"TA0111","Privilege Escalation",[42,47,51,55,59,64,68,72,76,80,84,88,92,96,101,105,110,115,119,123,127,132,136,140,144,148,153,157,161,165,169,173,177,181,185],{"id":43,"name":44,"tactic":45},"D3-CI","Configuration Inventory",{"name":46},"Model",{"id":48,"name":49,"tactic":50},"D3-AM","Access Modeling",{"name":46},{"id":52,"name":53,"tactic":54},"D3-DI","Data Inventory",{"name":46},{"id":56,"name":57,"tactic":58},"D3-NTPM","Network Traffic Policy Mapping",{"name":46},{"id":60,"name":61,"tactic":62},"D3-AEM","Application Exception Monitoring",{"name":63},"Detect",{"id":65,"name":66,"tactic":67},"D3-SCA","System Call Analysis",{"name":63},{"id":69,"name":70,"tactic":71},"D3-SFA","System File Analysis",{"name":63},{"id":73,"name":74,"tactic":75},"D3-FA","File Analysis",{"name":63},{"id":77,"name":78,"tactic":79},"D3-FIM","File Integrity Monitoring",{"name":63},{"id":81,"name":82,"tactic":83},"D3-OPM","Operational Process Monitoring",{"name":63},{"id":85,"name":86,"tactic":87},"D3-DA","Dynamic Analysis",{"name":63},{"id":89,"name":90,"tactic":91},"D3-EFA","Emulated File Analysis",{"name":63},{"id":93,"name":94,"tactic":95},"D3-PSA","Process Spawn Analysis",{"name":63},{"id":97,"name":98,"tactic":99},"D3-FEV","File Eviction",{"name":100},"Evict",{"id":102,"name":103,"tactic":104},"D3-AL","Account Locking",{"name":100},{"id":106,"name":107,"tactic":108},"D3-DF","Decoy File",{"name":109},"Deceive",{"id":111,"name":112,"tactic":113},"D3-FE","File Encryption",{"name":114},"Harden",{"id":116,"name":117,"tactic":118},"D3-AA","Agent Authentication",{"name":114},{"id":120,"name":121,"tactic":122},"D3-CDP","Change Default Password",{"name":114},{"id":124,"name":125,"tactic":126},"D3-SCP","System Configuration Permissions",{"name":114},{"id":128,"name":129,"tactic":130},"D3-RC","Restore Configuration",{"name":131},"Restore",{"id":133,"name":134,"tactic":135},"D3-RF","Restore File",{"name":131},{"id":137,"name":138,"tactic":139},"D3-ULA","Unlock Account",{"name":131},{"id":141,"name":142,"tactic":143},"D3-RUAA","Restore User Account Access",{"name":131},{"id":145,"name":146,"tactic":147},"D3-RD","Restore Database",{"name":131},{"id":149,"name":150,"tactic":151},"D3-SCF","System Call Filtering",{"name":152},"Isolate",{"id":154,"name":155,"tactic":156},"D3-CF","Content Filtering",{"name":152},{"id":158,"name":159,"tactic":160},"D3-LFP","Local File Permissions",{"name":152},{"id":162,"name":163,"tactic":164},"D3-RFAM","Remote File Access Mediation",{"name":152},{"id":166,"name":167,"tactic":168},"D3-CQ","Content Quarantine",{"name":152},{"id":170,"name":171,"tactic":172},"D3-CM","Content Modification",{"name":152},{"id":174,"name":175,"tactic":176},"D3-UAP","User Account Permissions",{"name":152},{"id":178,"name":179,"tactic":180},"D3-EAL","Executable Allowlisting",{"name":152},{"id":182,"name":183,"tactic":184},"D3-EDL","Executable Denylisting",{"name":152},{"id":186,"name":187,"tactic":188},"D3-HBPI","Hardware-based Process Isolation",{"name":152},{"id":190,"name":40,"techniques":191},"CAPEC-233",[192],{"id":32,"name":33,"tactics":193,"countermeasures":196},[194,195],{"id":36,"name":37},{"id":39,"name":40},[197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265],{"id":43,"name":44,"tactic":198},{"name":46},{"id":48,"name":49,"tactic":200},{"name":46},{"id":52,"name":53,"tactic":202},{"name":46},{"id":56,"name":57,"tactic":204},{"name":46},{"id":60,"name":61,"tactic":206},{"name":63},{"id":65,"name":66,"tactic":208},{"name":63},{"id":69,"name":70,"tactic":210},{"name":63},{"id":73,"name":74,"tactic":212},{"name":63},{"id":77,"name":78,"tactic":214},{"name":63},{"id":81,"name":82,"tactic":216},{"name":63},{"id":85,"name":86,"tactic":218},{"name":63},{"id":89,"name":90,"tactic":220},{"name":63},{"id":93,"name":94,"tactic":222},{"name":63},{"id":97,"name":98,"tactic":224},{"name":100},{"id":102,"name":103,"tactic":226},{"name":100},{"id":106,"name":107,"tactic":228},{"name":109},{"id":111,"name":112,"tactic":230},{"name":114},{"id":116,"name":117,"tactic":232},{"name":114},{"id":120,"name":121,"tactic":234},{"name":114},{"id":124,"name":125,"tactic":236},{"name":114},{"id":128,"name":129,"tactic":238},{"name":131},{"id":133,"name":134,"tactic":240},{"name":131},{"id":137,"name":138,"tactic":242},{"name":131},{"id":141,"name":142,"tactic":244},{"name":131},{"id":145,"name":146,"tactic":246},{"name":131},{"id":149,"name":150,"tactic":248},{"name":152},{"id":154,"name":155,"tactic":250},{"name":152},{"id":158,"name":159,"tactic":252},{"name":152},{"id":162,"name":163,"tactic":254},{"name":152},{"id":166,"name":167,"tactic":256},{"name":152},{"id":170,"name":171,"tactic":258},{"name":152},{"id":174,"name":175,"tactic":260},{"name":152},{"id":178,"name":179,"tactic":262},{"name":152},{"id":182,"name":183,"tactic":264},{"name":152},{"id":186,"name":187,"tactic":266},{"name":152},{"id":268,"name":269,"techniques":270},"CAPEC-58","Restful Privilege Elevation",[],[272],{"_key":273,"name":274,"source":275,"url":276,"maturity":277,"reliability_score":278,"verified":279,"type":9,"platforms":280,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_D220B3BA3EA27985","Exploit Reference (hackerone.com)","reference","https://hackerone.com/reports/1946470","unknown",0.2,false,[],[],[],[284,286,288,290,292,294,296,298,300,302,304,306,308,310,312,314,316,318,320,322,324,326],{"_key":285},"ALPINE-CVE-2023-32559",{"_key":287},"RHSA-2023:5532",{"_key":289},"SUSE-SU-2023:3306-1",{"_key":291},"SUSE-SU-2023:3355-1",{"_key":293},"SUSE-SU-2023:3356-1",{"_key":295},"SUSE-SU-2023:3400-1",{"_key":297},"SUSE-SU-2023:3378-1",{"_key":299},"SUSE-SU-2023:3379-1",{"_key":301},"SUSE-SU-2023:3408-1",{"_key":303},"SUSE-SU-2023:3455-1",{"_key":305},"OPENSUSE-SU-2024:13117-1",{"_key":307},"DLA-3886-1",{"_key":309},"DSA-5589-1",{"_key":311},"MGASA-2023-0264",{"_key":313},"USN-6822-1",{"_key":315},"UBUNTU-CVE-2023-32559",{"_key":317},"DEBIAN-CVE-2023-32559",{"_key":319},"RHSA-2023:5360",{"_key":321},"RHSA-2023:5361",{"_key":323},"RHSA-2023:5362",{"_key":325},"RHSA-2023:5363",{"_key":327},"RHSA-2023:5533",[],[330,331,332,333,334,335,336,337,338,339,340,342,344,346],{"_key":289},{"_key":291},{"_key":293},{"_key":295},{"_key":297},{"_key":299},{"_key":301},{"_key":303},{"_key":305},{"_key":311},{"_key":341},"CGA-29FW-CVQQ-MPP8",{"_key":343},"CGA-9848-7MR6-J8QR",{"_key":345},"CGA-CG3J-J6RP-GCGJ",{"_key":347},"CGA-MV6R-9MC7-H5HX","2023-08-24T01:23:29.038Z","2025-11-04T16:10:11.750Z","Modified",{"cisa_kev":279,"cisa_ransomware":279,"cisa_vendor":9,"epss_severity":352,"epss_score":353,"severity":354,"severity_score":355,"severity_version":356,"severity_source":357,"severity_vector":358,"severity_status":350},"low",0.00061,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",[360,366,370],{"url":276,"sources":361,"tags":363},[357,362],"nvd",[364,365],"Exploit","Third Party Advisory",{"url":367,"sources":368,"tags":369},"https://security.netapp.com/advisory/ntap-20231006-0006/",[357,362],[365],{"url":371,"sources":372,"tags":373},"https://lists.debian.org/debian-lts-announce/2024/09/msg00029.html",[357,362],[],[],{"date":376,"score":353,"percentile":377},"2026-06-04",0.19111,[379,383,387,390,393,395,398,401,404,407,410,413,415,418,421,425,428,431,433,436,439,442,445,448,451,454,457,460,464,467,470,473,476,479,482,484,487,489,492,495,498,501,504,507,510,513,516,519,523,526,529,532,535,538,541,544,547,550,553,557,560,563,566,569,572,575,578,581,584,587,590,593,596,598,601,604,607,610,613,616,619,622,625,628,631,634,637,640,643,646],{"date":380,"score":381,"percentile":382},"2025-11-04",0.00053,0.16532,{"date":384,"score":385,"percentile":386},"2025-11-05",0.00059,0.18524,{"date":388,"score":385,"percentile":389},"2025-11-06",0.18532,{"date":391,"score":385,"percentile":392},"2025-11-07",0.18549,{"date":394,"score":385,"percentile":392},"2025-11-08",{"date":396,"score":385,"percentile":397},"2025-11-09",0.18523,{"date":399,"score":385,"percentile":400},"2025-11-10",0.18485,{"date":402,"score":385,"percentile":403},"2025-11-11",0.18489,{"date":405,"score":385,"percentile":406},"2025-11-12",0.18527,{"date":408,"score":385,"percentile":409},"2025-11-13",0.18558,{"date":411,"score":385,"percentile":412},"2025-11-14",0.18546,{"date":414,"score":385,"percentile":406},"2025-11-15",{"date":416,"score":385,"percentile":417},"2025-11-16",0.18484,{"date":419,"score":385,"percentile":420},"2025-11-17",0.18409,{"date":422,"score":423,"percentile":424},"2025-11-18",0.00271,0.47477,{"date":426,"score":423,"percentile":427},"2025-11-19",0.47491,{"date":429,"score":423,"percentile":430},"2025-11-20",0.47471,{"date":432,"score":385,"percentile":420},"2025-11-21",{"date":434,"score":385,"percentile":435},"2025-11-22",0.18415,{"date":437,"score":385,"percentile":438},"2025-11-23",0.18384,{"date":440,"score":385,"percentile":441},"2025-11-24",0.18352,{"date":443,"score":385,"percentile":444},"2025-11-25",0.1834,{"date":446,"score":385,"percentile":447},"2025-11-26",0.18331,{"date":449,"score":385,"percentile":450},"2025-11-27",0.18334,{"date":452,"score":385,"percentile":453},"2025-11-28",0.18318,{"date":455,"score":385,"percentile":456},"2025-11-29",0.18296,{"date":458,"score":385,"percentile":459},"2025-11-30",0.18302,{"date":461,"score":462,"percentile":463},"2025-12-01",0.00054,0.16807,{"date":465,"score":462,"percentile":466},"2025-12-02",0.16817,{"date":468,"score":462,"percentile":469},"2025-12-03",0.1683,{"date":471,"score":385,"percentile":472},"2025-12-04",0.18336,{"date":474,"score":385,"percentile":475},"2025-12-05",0.18391,{"date":477,"score":385,"percentile":478},"2025-12-06",0.18387,{"date":480,"score":385,"percentile":481},"2025-12-07",0.18373,{"date":483,"score":385,"percentile":475},"2025-12-08",{"date":485,"score":385,"percentile":486},"2025-12-09",0.18458,{"date":488,"score":385,"percentile":389},"2025-12-10",{"date":490,"score":385,"percentile":491},"2025-12-11",0.18575,{"date":493,"score":385,"percentile":494},"2025-12-12",0.18609,{"date":496,"score":385,"percentile":497},"2025-12-13",0.18619,{"date":499,"score":385,"percentile":500},"2025-12-14",0.18568,{"date":502,"score":385,"percentile":503},"2025-12-15",0.18553,{"date":505,"score":385,"percentile":506},"2025-12-16",0.18585,{"date":508,"score":385,"percentile":509},"2025-12-17",0.18672,{"date":511,"score":385,"percentile":512},"2025-12-18",0.18755,{"date":514,"score":385,"percentile":515},"2025-12-19",0.18767,{"date":517,"score":385,"percentile":518},"2025-12-20",0.18741,{"date":520,"score":521,"percentile":522},"2025-12-21",0.00076,0.2323,{"date":524,"score":521,"percentile":525},"2025-12-22",0.23199,{"date":527,"score":521,"percentile":528},"2025-12-23",0.23178,{"date":530,"score":462,"percentile":531},"2025-12-24",0.17212,{"date":533,"score":462,"percentile":534},"2025-12-25",0.17291,{"date":536,"score":462,"percentile":537},"2025-12-26",0.17276,{"date":539,"score":462,"percentile":540},"2025-12-27",0.17273,{"date":542,"score":462,"percentile":543},"2025-12-28",0.17188,{"date":545,"score":462,"percentile":546},"2025-12-29",0.17154,{"date":548,"score":462,"percentile":549},"2025-12-30",0.17169,{"date":551,"score":462,"percentile":552},"2025-12-31",0.17243,{"date":554,"score":555,"percentile":556},"2026-01-01",0.0005,0.15759,{"date":558,"score":555,"percentile":559},"2026-01-02",0.15748,{"date":561,"score":555,"percentile":562},"2026-01-03",0.15726,{"date":564,"score":462,"percentile":565},"2026-01-04",0.17209,{"date":567,"score":462,"percentile":568},"2026-01-05",0.17174,{"date":570,"score":462,"percentile":571},"2026-01-06",0.17186,{"date":573,"score":462,"percentile":574},"2026-01-07",0.17222,{"date":576,"score":462,"percentile":577},"2026-01-08",0.17288,{"date":579,"score":462,"percentile":580},"2026-01-09",0.17294,{"date":582,"score":462,"percentile":583},"2026-01-10",0.17312,{"date":585,"score":462,"percentile":586},"2026-01-11",0.17317,{"date":588,"score":462,"percentile":589},"2026-01-12",0.17277,{"date":591,"score":462,"percentile":592},"2026-01-13",0.17261,{"date":594,"score":462,"percentile":595},"2026-01-14",0.17315,{"date":597,"score":462,"percentile":595},"2026-01-15",{"date":599,"score":462,"percentile":600},"2026-01-16",0.17361,{"date":602,"score":462,"percentile":603},"2026-01-17",0.17371,{"date":605,"score":462,"percentile":606},"2026-01-18",0.1731,{"date":608,"score":462,"percentile":609},"2026-01-19",0.17253,{"date":611,"score":462,"percentile":612},"2026-01-20",0.17227,{"date":614,"score":462,"percentile":615},"2026-01-21",0.17205,{"date":617,"score":462,"percentile":618},"2026-01-22",0.1714,{"date":620,"score":462,"percentile":621},"2026-01-23",0.17235,{"date":623,"score":462,"percentile":624},"2026-01-24",0.17265,{"date":626,"score":462,"percentile":627},"2026-01-25",0.17198,{"date":629,"score":462,"percentile":630},"2026-01-26",0.17103,{"date":632,"score":462,"percentile":633},"2026-01-27",0.17092,{"date":635,"score":462,"percentile":636},"2026-01-28",0.1709,{"date":638,"score":462,"percentile":639},"2026-01-29",0.17069,{"date":641,"score":462,"percentile":642},"2026-01-30",0.17085,{"date":644,"score":462,"percentile":645},"2026-01-31",0.17098,{"date":647,"score":555,"percentile":648},"2026-02-01",0.15456,[650,655],{"source":357,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":651,"cvss_v4_0":9},{"baseScore":355,"baseSeverity":652,"vectorString":358,"impactScore":653,"exploitabilityScore":654},"HIGH",9.8,4.1,{"source":362,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":656,"cvss_v4_0":9},{"baseScore":355,"baseSeverity":652,"vectorString":358,"impactScore":653,"exploitabilityScore":654},[658,734],{"ecosystem":9,"name":659,"vendor":660,"product":659,"cpe_part":661,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":662},"node","nodejs","a",[663,670,674,678,682,686,690,694,698,702,706,710,714,718,722,726,730],{"version":664,"is_range":665,"range_type":357,"version_start":666,"version_start_type":667,"version_end":668,"version_end_type":669,"fixed_in":9},">= 4.0, \u003C 4.*",true,"4.0","including","4.*","excluding",{"version":671,"is_range":665,"range_type":357,"version_start":672,"version_start_type":667,"version_end":673,"version_end_type":669,"fixed_in":9},">= 5.0, \u003C 5.*","5.0","5.*",{"version":675,"is_range":665,"range_type":357,"version_start":676,"version_start_type":667,"version_end":677,"version_end_type":669,"fixed_in":9},">= 6.0, \u003C 6.*","6.0","6.*",{"version":679,"is_range":665,"range_type":357,"version_start":680,"version_start_type":667,"version_end":681,"version_end_type":669,"fixed_in":9},">= 7.0, \u003C 7.*","7.0","7.*",{"version":683,"is_range":665,"range_type":357,"version_start":684,"version_start_type":667,"version_end":685,"version_end_type":669,"fixed_in":9},">= 8.0, \u003C 8.*","8.0","8.*",{"version":687,"is_range":665,"range_type":357,"version_start":688,"version_start_type":667,"version_end":689,"version_end_type":669,"fixed_in":9},">= 9.0, \u003C 9.*","9.0","9.*",{"version":691,"is_range":665,"range_type":357,"version_start":692,"version_start_type":667,"version_end":693,"version_end_type":669,"fixed_in":9},">= 10.0, \u003C 10.*","10.0","10.*",{"version":695,"is_range":665,"range_type":357,"version_start":696,"version_start_type":667,"version_end":697,"version_end_type":669,"fixed_in":9},">= 11.0, \u003C 11.*","11.0","11.*",{"version":699,"is_range":665,"range_type":357,"version_start":700,"version_start_type":667,"version_end":701,"version_end_type":669,"fixed_in":9},">= 12.0, \u003C 12.*","12.0","12.*",{"version":703,"is_range":665,"range_type":357,"version_start":704,"version_start_type":667,"version_end":705,"version_end_type":669,"fixed_in":9},">= 13.0, \u003C 13.*","13.0","13.*",{"version":707,"is_range":665,"range_type":357,"version_start":708,"version_start_type":667,"version_end":709,"version_end_type":669,"fixed_in":9},">= 14.0, \u003C 14.*","14.0","14.*",{"version":711,"is_range":665,"range_type":357,"version_start":712,"version_start_type":667,"version_end":713,"version_end_type":669,"fixed_in":9},">= 15.0, \u003C 15.*","15.0","15.*",{"version":715,"is_range":665,"range_type":357,"version_start":716,"version_start_type":667,"version_end":717,"version_end_type":669,"fixed_in":9},">= 16.0, \u003C 16.20.2","16.0","16.20.2",{"version":719,"is_range":665,"range_type":357,"version_start":720,"version_start_type":667,"version_end":721,"version_end_type":669,"fixed_in":9},">= 17.0, \u003C 17.*","17.0","17.*",{"version":723,"is_range":665,"range_type":357,"version_start":724,"version_start_type":667,"version_end":725,"version_end_type":669,"fixed_in":9},">= 18.0, \u003C 18.17.1","18.0","18.17.1",{"version":727,"is_range":665,"range_type":357,"version_start":728,"version_start_type":667,"version_end":729,"version_end_type":669,"fixed_in":9},">= 19.0, \u003C 19.*","19.0","19.*",{"version":731,"is_range":665,"range_type":357,"version_start":732,"version_start_type":667,"version_end":733,"version_end_type":669,"fixed_in":9},">= 20.0, \u003C 20.5.1","20.0","20.5.1",{"ecosystem":9,"name":735,"vendor":660,"product":735,"cpe_part":661,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":736},"node.js",[737,742,746],{"version":738,"is_range":665,"range_type":739,"version_start":740,"version_start_type":667,"version_end":741,"version_end_type":667,"fixed_in":9},"gte16.0.0_lte16.20.1","cpe","16.0.0","16.20.1",{"version":743,"is_range":665,"range_type":739,"version_start":744,"version_start_type":667,"version_end":745,"version_end_type":667,"fixed_in":9},"gte18.0.0_lte18.17.0","18.0.0","18.17.0",{"version":747,"is_range":665,"range_type":739,"version_start":748,"version_start_type":667,"version_end":749,"version_end_type":667,"fixed_in":9},"gte20.0.0_lte20.5.0","20.0.0","20.5.0"]