[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-55132":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":131,"aliases":132,"duplicate_of":9,"upstream":133,"downstream":134,"duplicates":191,"related":192,"reserved_at":9,"published_at":205,"modified_at":206,"state":207,"summary":208,"references_raw":217,"kevs":225,"epss":226,"epss_history":229,"metrics":482,"affected":495},"CVE-2025-55132","A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` even when the process has only read permissions. Unlike `utimes()`, `futimes()` does not apply the expected write-permission checks, which means file metadata can be modified in read-only directories. This behavior could be used to alter timestamps in ways that obscure activity, reducing the reliability of logs. This vulnerability affects users of the permission model on Node.js v20,  v22,  v24, and v25.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","weakness","Draft","Base","Medium",[20,68,127],{"id":21,"name":22,"techniques":23},"CAPEC-1","Accessing Functionality Not Properly Constrained by ACLs",[24],{"id":25,"name":26,"tactics":27,"countermeasures":43},"T1574.010","Services File Permissions Weakness",[28,31,34,37,40],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",{"id":41,"name":42},"TA0104","Execution",[44,49,53,58,63],{"id":45,"name":46,"tactic":47},"D3-SWI","Software Inventory",{"name":48},"Model",{"id":50,"name":51,"tactic":52},"D3-AVE","Asset Vulnerability Enumeration",{"name":48},{"id":54,"name":55,"tactic":56},"D3-SBV","Service Binary Verification",{"name":57},"Detect",{"id":59,"name":60,"tactic":61},"D3-SU","Software Update",{"name":62},"Harden",{"id":64,"name":65,"tactic":66},"D3-RS","Restore Software",{"name":67},"Restore",{"id":69,"name":70,"techniques":71},"CAPEC-127","Directory Indexing",[72],{"id":73,"name":74,"tactics":75,"countermeasures":79},"T1083","File and Directory Discovery",[76],{"id":77,"name":78},"TA0102","Discovery",[80,84,88,93,98,102,106,111,115,119,123],{"id":81,"name":82,"tactic":83},"D3-FA","File Analysis",{"name":57},{"id":85,"name":86,"tactic":87},"D3-FIM","File Integrity Monitoring",{"name":57},{"id":89,"name":90,"tactic":91},"D3-FEV","File Eviction",{"name":92},"Evict",{"id":94,"name":95,"tactic":96},"D3-DF","Decoy File",{"name":97},"Deceive",{"id":99,"name":100,"tactic":101},"D3-FE","File Encryption",{"name":62},{"id":103,"name":104,"tactic":105},"D3-RF","Restore File",{"name":67},{"id":107,"name":108,"tactic":109},"D3-LFP","Local File Permissions",{"name":110},"Isolate",{"id":112,"name":113,"tactic":114},"D3-CF","Content Filtering",{"name":110},{"id":116,"name":117,"tactic":118},"D3-RFAM","Remote File Access Mediation",{"name":110},{"id":120,"name":121,"tactic":122},"D3-CQ","Content Quarantine",{"name":110},{"id":124,"name":125,"tactic":126},"D3-CM","Content Modification",{"name":110},{"id":128,"name":129,"techniques":130},"CAPEC-81","Web Server Logs Tampering",[],[],[],[],[135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189],{"_key":136},"SUSE-SU-2026:0301-1",{"_key":138},"SUSE-SU-2026:0457-1",{"_key":140},"SUSE-SU-2026:20436-1",{"_key":142},"DSA-6166-1",{"_key":144},"SUSE-SU-2026:0295-1",{"_key":146},"SUSE-SU-2026:0435-1",{"_key":148},"OPENSUSE-SU-2026:10062-1",{"_key":150},"OPENSUSE-SU-2026:10074-1",{"_key":152},"OPENSUSE-SU-2026:20236-1",{"_key":154},"MGASA-2026-0009",{"_key":156},"UBUNTU-CVE-2025-55132",{"_key":158},"ALPINE-CVE-2025-55132",{"_key":160},"DEBIAN-CVE-2025-55132",{"_key":162},"OPENSUSE-SU-2026:11110-1",{"_key":164},"RHSA-2026:1842",{"_key":166},"RHSA-2026:1843",{"_key":168},"RHSA-2026:2420",{"_key":170},"RHSA-2026:2421",{"_key":172},"RHSA-2026:2422",{"_key":174},"RHSA-2026:2781",{"_key":176},"RHSA-2026:2782",{"_key":178},"RHSA-2026:2783",{"_key":180},"RHSA-2026:6402",{"_key":182},"RHSA-2026:6431",{"_key":184},"RHSA-2026:7378",{"_key":186},"RHSA-2026:7386",{"_key":188},"RHSA-2026:7387",{"_key":190},"RHSA-2026:7657",[],[193,194,195,196,197,198,199,200,201,202,203],{"_key":136},{"_key":138},{"_key":140},{"_key":144},{"_key":146},{"_key":148},{"_key":150},{"_key":152},{"_key":154},{"_key":162},{"_key":204},"CGA-RFR9-72FF-Q3PH","2026-01-20T20:41:55.620Z","2026-01-21T18:53:03.738Z","Analyzed",{"cisa_kev":209,"cisa_ransomware":209,"cisa_vendor":9,"epss_severity":210,"epss_score":211,"severity":212,"severity_score":213,"severity_version":214,"severity_source":215,"severity_vector":216,"severity_status":207},false,"low",0.00227,"medium",5.3,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",[218],{"url":219,"sources":220,"tags":222},"https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",[221,215],"cve.org",[223,224],"Release Notes","Vendor Advisory",[],{"date":227,"score":211,"percentile":228},"2026-07-05",0.13349,[230,234,237,239,241,245,248,251,253,255,257,259,262,264,267,271,274,277,280,282,285,288,291,294,297,299,302,305,308,311,314,317,321,323,326,329,332,334,337,340,344,347,350,353,356,359,362,364,367,369,372,375,378,381,384,387,390,393,395,397,400,403,405,408,411,414,417,419,422,425,428,431,434,437,440,442,445,447,450,452,454,457,460,462,465,468,471,474,477,479],{"date":231,"score":232,"percentile":233},"2026-01-21",0.00004,0.0016,{"date":235,"score":232,"percentile":236},"2026-01-22",0.00146,{"date":238,"score":232,"percentile":236},"2026-01-23",{"date":240,"score":232,"percentile":236},"2026-01-24",{"date":242,"score":243,"percentile":244},"2026-01-25",0.00003,0.00119,{"date":246,"score":232,"percentile":247},"2026-01-26",0.00121,{"date":249,"score":232,"percentile":250},"2026-01-27",0.00122,{"date":252,"score":232,"percentile":247},"2026-01-28",{"date":254,"score":232,"percentile":247},"2026-01-29",{"date":256,"score":232,"percentile":250},"2026-01-30",{"date":258,"score":232,"percentile":247},"2026-01-31",{"date":260,"score":232,"percentile":261},"2026-02-01",0.00151,{"date":263,"score":232,"percentile":261},"2026-02-02",{"date":265,"score":232,"percentile":266},"2026-02-03",0.0015,{"date":268,"score":269,"percentile":270},"2026-02-04",0.00008,0.00542,{"date":272,"score":269,"percentile":273},"2026-02-05",0.00545,{"date":275,"score":269,"percentile":276},"2026-02-06",0.00552,{"date":278,"score":269,"percentile":279},"2026-02-07",0.00553,{"date":281,"score":269,"percentile":279},"2026-02-08",{"date":283,"score":269,"percentile":284},"2026-02-09",0.00547,{"date":286,"score":269,"percentile":287},"2026-02-10",0.00549,{"date":289,"score":269,"percentile":290},"2026-02-11",0.00562,{"date":292,"score":269,"percentile":293},"2026-02-12",0.00563,{"date":295,"score":269,"percentile":296},"2026-02-13",0.0056,{"date":298,"score":269,"percentile":296},"2026-02-14",{"date":300,"score":269,"percentile":301},"2026-02-15",0.00561,{"date":303,"score":269,"percentile":304},"2026-02-16",0.00559,{"date":306,"score":269,"percentile":307},"2026-02-17",0.00556,{"date":309,"score":269,"percentile":310},"2026-02-18",0.00624,{"date":312,"score":269,"percentile":313},"2026-02-19",0.00623,{"date":315,"score":269,"percentile":316},"2026-02-20",0.00629,{"date":318,"score":319,"percentile":320},"2026-02-21",0.00009,0.00796,{"date":322,"score":319,"percentile":320},"2026-02-22",{"date":324,"score":319,"percentile":325},"2026-02-23",0.00787,{"date":327,"score":319,"percentile":328},"2026-02-24",0.0078,{"date":330,"score":319,"percentile":331},"2026-02-25",0.00782,{"date":333,"score":319,"percentile":331},"2026-02-26",{"date":335,"score":319,"percentile":336},"2026-02-27",0.00788,{"date":338,"score":319,"percentile":339},"2026-02-28",0.0079,{"date":341,"score":342,"percentile":343},"2026-03-01",0.0001,0.01098,{"date":345,"score":342,"percentile":346},"2026-03-02",0.01092,{"date":348,"score":342,"percentile":349},"2026-03-03",0.01114,{"date":351,"score":319,"percentile":352},"2026-03-04",0.00803,{"date":354,"score":319,"percentile":355},"2026-03-05",0.00812,{"date":357,"score":319,"percentile":358},"2026-03-06",0.00811,{"date":360,"score":319,"percentile":361},"2026-03-07",0.00808,{"date":363,"score":319,"percentile":361},"2026-03-08",{"date":365,"score":319,"percentile":366},"2026-03-09",0.00807,{"date":368,"score":319,"percentile":361},"2026-03-10",{"date":370,"score":319,"percentile":371},"2026-03-11",0.00806,{"date":373,"score":319,"percentile":374},"2026-03-12",0.00809,{"date":376,"score":319,"percentile":377},"2026-03-13",0.0081,{"date":379,"score":319,"percentile":380},"2026-03-14",0.00805,{"date":382,"score":319,"percentile":383},"2026-03-15",0.00802,{"date":385,"score":319,"percentile":386},"2026-03-16",0.00799,{"date":388,"score":319,"percentile":389},"2026-03-17",0.00797,{"date":391,"score":319,"percentile":392},"2026-03-18",0.00798,{"date":394,"score":319,"percentile":392},"2026-03-19",{"date":396,"score":319,"percentile":389},"2026-03-20",{"date":398,"score":319,"percentile":399},"2026-03-21",0.00957,{"date":401,"score":319,"percentile":402},"2026-03-22",0.00949,{"date":404,"score":319,"percentile":402},"2026-03-23",{"date":406,"score":319,"percentile":407},"2026-03-24",0.00943,{"date":409,"score":319,"percentile":410},"2026-03-25",0.00951,{"date":412,"score":319,"percentile":413},"2026-03-26",0.00952,{"date":415,"score":319,"percentile":416},"2026-03-27",0.00956,{"date":418,"score":319,"percentile":399},"2026-03-28",{"date":420,"score":342,"percentile":421},"2026-03-29",0.01099,{"date":423,"score":342,"percentile":424},"2026-03-30",0.01091,{"date":426,"score":342,"percentile":427},"2026-03-31",0.01076,{"date":429,"score":342,"percentile":430},"2026-04-01",0.01075,{"date":432,"score":342,"percentile":433},"2026-04-02",0.01084,{"date":435,"score":342,"percentile":436},"2026-04-03",0.01082,{"date":438,"score":342,"percentile":439},"2026-04-04",0.01085,{"date":441,"score":342,"percentile":433},"2026-04-05",{"date":443,"score":342,"percentile":444},"2026-04-06",0.0109,{"date":446,"score":342,"percentile":424},"2026-04-07",{"date":448,"score":342,"percentile":449},"2026-04-08",0.01096,{"date":451,"score":342,"percentile":449},"2026-04-09",{"date":453,"score":342,"percentile":346},"2026-04-10",{"date":455,"score":342,"percentile":456},"2026-04-11",0.0108,{"date":458,"score":342,"percentile":459},"2026-04-12",0.01073,{"date":461,"score":342,"percentile":430},"2026-04-13",{"date":463,"score":342,"percentile":464},"2026-04-14",0.01059,{"date":466,"score":342,"percentile":467},"2026-04-15",0.0106,{"date":469,"score":342,"percentile":470},"2026-04-16",0.01068,{"date":472,"score":342,"percentile":473},"2026-04-17",0.01071,{"date":475,"score":342,"percentile":476},"2026-04-18",0.01077,{"date":478,"score":342,"percentile":427},"2026-04-19",{"date":480,"score":342,"percentile":481},"2026-04-20",0.01074,[483,490],{"source":221,"cvss_v2_0":9,"cvss_v3_0":484,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":485,"baseSeverity":486,"vectorString":487,"impactScore":488,"exploitabilityScore":489},2.8,"LOW","CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",2.3,3.3,{"source":215,"cvss_v2_0":9,"cvss_v3_0":491,"cvss_v3_1":492,"cvss_v4_0":9},{"baseScore":485,"baseSeverity":486,"vectorString":487,"impactScore":488,"exploitabilityScore":489},{"baseScore":213,"baseSeverity":493,"vectorString":216,"impactScore":488,"exploitabilityScore":494},"MEDIUM",10,[496,515],{"ecosystem":9,"name":497,"vendor":498,"product":497,"cpe_part":499,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":500},"node","nodejs","a",[501,506,509,512],{"version":502,"is_range":503,"range_type":221,"version_start":504,"version_start_type":505,"version_end":504,"version_end_type":505,"fixed_in":9},">= 20.19.6, \u003C= 20.19.6",true,"20.19.6","including",{"version":507,"is_range":503,"range_type":221,"version_start":508,"version_start_type":505,"version_end":508,"version_end_type":505,"fixed_in":9},">= 22.21.1, \u003C= 22.21.1","22.21.1",{"version":510,"is_range":503,"range_type":221,"version_start":511,"version_start_type":505,"version_end":511,"version_end_type":505,"fixed_in":9},">= 24.12.0, \u003C= 24.12.0","24.12.0",{"version":513,"is_range":503,"range_type":221,"version_start":514,"version_start_type":505,"version_end":514,"version_end_type":505,"fixed_in":9},">= 25.2.1, \u003C= 25.2.1","25.2.1",{"ecosystem":9,"name":516,"vendor":498,"product":516,"cpe_part":499,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":517},"node.js",[518,524,528,532],{"version":519,"is_range":503,"range_type":520,"version_start":521,"version_start_type":505,"version_end":522,"version_end_type":523,"fixed_in":9},"gte20.0.0_lt20.20.0","cpe","20.0.0","20.20.0","excluding",{"version":525,"is_range":503,"range_type":520,"version_start":526,"version_start_type":505,"version_end":527,"version_end_type":523,"fixed_in":9},"gte22.0.0_lt22.22.0","22.0.0","22.22.0",{"version":529,"is_range":503,"range_type":520,"version_start":530,"version_start_type":505,"version_end":531,"version_end_type":523,"fixed_in":9},"gte24.0.0_lt24.13.0","24.0.0","24.13.0",{"version":533,"is_range":503,"range_type":520,"version_start":534,"version_start_type":505,"version_end":535,"version_end_type":523,"fixed_in":9},"gte25.0.0_lt25.3.0","25.0.0","25.3.0"]