CVE-2024-21891 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-21891 Interim 1 10 2025-05-17T00:24:26Z current 2024-02-17T00:09:13Z 2025-05-17T00:24:26Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-21891 Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack. This vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2024-February/018059.html E-Mail link for SUSE-SU-2024:0643-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container bci/nodejs:20-6.12 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7.1 SUSE Liberty Linux 8 SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Module for Web and Scripting 12 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Manager Server 4.3 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.5 openSUSE Tumbleweed corepack20-20.11.1-1.1 corepack20-20.11.1-150500.11.6.1 corepack21-21.6.2-1.1 nodejs-20.11.1-1.module+el8.9.0+21380+12032667 nodejs-20.11.1-1.module+el9.3.0+21385+bac43d5a nodejs-devel-20.11.1-1.module+el8.9.0+21380+12032667 nodejs-devel-20.11.1-1.module+el9.3.0+21385+bac43d5a nodejs-docs-20.11.1-1.module+el8.9.0+21380+12032667 nodejs-docs-20.11.1-1.module+el9.3.0+21385+bac43d5a nodejs-full-i18n-20.11.1-1.module+el8.9.0+21380+12032667 nodejs-full-i18n-20.11.1-1.module+el9.3.0+21385+bac43d5a nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824 nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781 nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d nodejs10 nodejs10-devel nodejs10-docs nodejs12 nodejs12-devel nodejs12-docs nodejs14 nodejs14-devel nodejs14-docs nodejs16 nodejs16-devel nodejs16-docs nodejs18 nodejs18-devel nodejs18-docs nodejs20-20.11.1-1.1 nodejs20-20.11.1-150500.11.6.1 nodejs20-devel-20.11.1-1.1 nodejs20-devel-20.11.1-150500.11.6.1 nodejs20-docs-20.11.1-1.1 nodejs20-docs-20.11.1-150500.11.6.1 nodejs21-21.6.2-1.1 nodejs21-devel-21.6.2-1.1 nodejs21-docs-21.6.2-1.1 nodejs4 nodejs4-devel nodejs4-docs nodejs6 nodejs6-devel nodejs6-docs nodejs8 nodejs8-devel nodejs8-docs npm-10.2.4-1.20.11.1.1.module+el8.9.0+21380+12032667 npm-10.2.4-1.20.11.1.1.module+el9.3.0+21385+bac43d5a npm10 npm12 npm14 npm16 npm18 npm20-20.11.1-1.1 npm20-20.11.1-150500.11.6.1 npm21-21.6.2-1.1 npm4 npm6 npm8 nodejs20-20.11.1-150500.11.6.1 as a component of Container bci/nodejs:20-6.12 npm20-20.11.1-150500.11.6.1 as a component of Container bci/nodejs:20-6.12 nodejs-20.11.1-1.module+el8.9.0+21380+12032667 as a component of SUSE Liberty Linux 8 nodejs-devel-20.11.1-1.module+el8.9.0+21380+12032667 as a component of SUSE Liberty Linux 8 nodejs-docs-20.11.1-1.module+el8.9.0+21380+12032667 as a component of SUSE Liberty Linux 8 nodejs-full-i18n-20.11.1-1.module+el8.9.0+21380+12032667 as a component of SUSE Liberty Linux 8 nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824 as a component of SUSE Liberty Linux 8 nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a as a component of SUSE Liberty Linux 8 nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a as a component of SUSE Liberty Linux 8 npm-10.2.4-1.20.11.1.1.module+el8.9.0+21380+12032667 as a component of SUSE Liberty Linux 8 nodejs-20.11.1-1.module+el9.3.0+21385+bac43d5a as a component of SUSE Liberty Linux 9 nodejs-devel-20.11.1-1.module+el9.3.0+21385+bac43d5a as a component of SUSE Liberty Linux 9 nodejs-docs-20.11.1-1.module+el9.3.0+21385+bac43d5a as a component of SUSE Liberty Linux 9 nodejs-full-i18n-20.11.1-1.module+el9.3.0+21385+bac43d5a as a component of SUSE Liberty Linux 9 nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781 as a component of SUSE Liberty Linux 9 nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d as a component of SUSE Liberty Linux 9 nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d as a component of SUSE Liberty Linux 9 npm-10.2.4-1.20.11.1.1.module+el9.3.0+21385+bac43d5a as a component of SUSE Liberty Linux 9 nodejs20-20.11.1-150500.11.6.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20-devel-20.11.1-150500.11.6.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs20-docs-20.11.1-150500.11.6.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 npm20-20.11.1-150500.11.6.1 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 corepack20-20.11.1-150500.11.6.1 as a component of openSUSE Leap 15.5 nodejs20-20.11.1-150500.11.6.1 as a component of openSUSE Leap 15.5 nodejs20-devel-20.11.1-150500.11.6.1 as a component of openSUSE Leap 15.5 nodejs20-docs-20.11.1-150500.11.6.1 as a component of openSUSE Leap 15.5 npm20-20.11.1-150500.11.6.1 as a component of openSUSE Leap 15.5 corepack20-20.11.1-1.1 as a component of openSUSE Tumbleweed corepack21-21.6.2-1.1 as a component of openSUSE Tumbleweed nodejs20-20.11.1-1.1 as a component of openSUSE Tumbleweed nodejs20-devel-20.11.1-1.1 as a component of openSUSE Tumbleweed nodejs20-docs-20.11.1-1.1 as a component of openSUSE Tumbleweed nodejs21-21.6.2-1.1 as a component of openSUSE Tumbleweed nodejs21-devel-21.6.2-1.1 as a component of openSUSE Tumbleweed nodejs21-docs-21.6.2-1.1 as a component of openSUSE Tumbleweed npm20-20.11.1-1.1 as a component of openSUSE Tumbleweed npm21-21.6.2-1.1 as a component of openSUSE Tumbleweed nodejs10 as a component of SUSE CaaS Platform 4.0 nodejs10-devel as a component of SUSE CaaS Platform 4.0 nodejs10-docs as a component of SUSE CaaS Platform 4.0 npm10 as a component of SUSE CaaS Platform 4.0 nodejs8 as a component of SUSE CaaS Platform 4.0 nodejs8-devel as a component of SUSE CaaS Platform 4.0 nodejs8-docs as a component of SUSE CaaS Platform 4.0 npm8 as a component of SUSE CaaS Platform 4.0 nodejs12 as a component of SUSE Enterprise Storage 7.1 nodejs12-devel as a component of SUSE Enterprise Storage 7.1 nodejs12-docs as a component of SUSE Enterprise Storage 7.1 npm12 as a component of SUSE Enterprise Storage 7.1 nodejs14 as a component of SUSE Enterprise Storage 7.1 nodejs14-devel as a component of SUSE Enterprise Storage 7.1 nodejs14-docs as a component of SUSE Enterprise Storage 7.1 npm14 as a component of SUSE Enterprise Storage 7.1 nodejs16 as a component of SUSE Enterprise Storage 7.1 nodejs16-devel as a component of SUSE Enterprise Storage 7.1 nodejs16-docs as a component of SUSE Enterprise Storage 7.1 npm16 as a component of SUSE Enterprise Storage 7.1 nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS nodejs10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs10-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs10-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm10 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs8-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS npm8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs12-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm12 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs14-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm14 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs18-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs18-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS npm18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS nodejs16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs16-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs16-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS npm16 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs18-docs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS npm18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS nodejs10 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs10-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs10-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm10 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs12 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs12-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs12-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm12 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs14-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm14 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs16-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm16 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm18 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs4 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs4-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs4-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm4 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs6 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs6-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs6-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 12 npm6 as a component of SUSE Linux Enterprise Module for Web and Scripting 12 nodejs18 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs18-devel as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs18-docs as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 npm18 as a component of SUSE Linux Enterprise Module for Web and Scripting 15 SP5 nodejs10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS nodejs10 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm10 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS npm8 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS nodejs12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs12-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm12 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs14-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm14 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16-docs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS npm16 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS nodejs16 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs16-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs16-docs as a component of SUSE Linux Enterprise Server 15 SP4-LTSS npm16 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs18-docs as a component of SUSE Linux Enterprise Server 15 SP4-LTSS npm18 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS nodejs10 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10-devel as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10-docs as a component of SUSE Linux Enterprise Server 15-LTSS npm10 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-devel as a component of SUSE Linux Enterprise Server 15-LTSS nodejs8-docs as a component of SUSE Linux Enterprise Server 15-LTSS npm8 as a component of SUSE Linux Enterprise Server 15-LTSS nodejs10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 npm10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs8-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 npm8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 nodejs10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs10-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs10-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm10 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs14-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs8-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 npm8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 nodejs12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs12-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm12 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs14-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm14 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 npm16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 nodejs16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs16-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs16-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 npm16 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs18-docs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 npm18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 nodejs16 as a component of SUSE Manager Server 4.3 nodejs16-devel as a component of SUSE Manager Server 4.3 nodejs16-docs as a component of SUSE Manager Server 4.3 npm16 as a component of SUSE Manager Server 4.3 nodejs18 as a component of SUSE Manager Server 4.3 nodejs18-devel as a component of SUSE Manager Server 4.3 nodejs18-docs as a component of SUSE Manager Server 4.3 npm18 as a component of SUSE Manager Server 4.3 nodejs6 as a component of SUSE OpenStack Cloud Crowbar 8 nodejs6 as a component of SUSE OpenStack Cloud Crowbar 9 Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to filesystem permission model bypass through path traversal attack. This vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21. Please note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. CVE-2024-21891 Container bci/nodejs:20-6.12:nodejs20-20.11.1-150500.11.6.1 Container bci/nodejs:20-6.12:npm20-20.11.1-150500.11.6.1 SUSE Liberty Linux 8:nodejs-20.11.1-1.module+el8.9.0+21380+12032667 SUSE Liberty Linux 8:nodejs-devel-20.11.1-1.module+el8.9.0+21380+12032667 SUSE Liberty Linux 8:nodejs-docs-20.11.1-1.module+el8.9.0+21380+12032667 SUSE Liberty Linux 8:nodejs-full-i18n-20.11.1-1.module+el8.9.0+21380+12032667 SUSE Liberty Linux 8:nodejs-nodemon-3.0.1-1.module+el8.9.0+20473+c4e3d824 SUSE Liberty Linux 8:nodejs-packaging-2021.06-4.module+el8.9.0+19519+e25b965a SUSE Liberty Linux 8:nodejs-packaging-bundler-2021.06-4.module+el8.9.0+19519+e25b965a SUSE Liberty Linux 8:npm-10.2.4-1.20.11.1.1.module+el8.9.0+21380+12032667 SUSE Liberty Linux 9:nodejs-20.11.1-1.module+el9.3.0+21385+bac43d5a SUSE Liberty Linux 9:nodejs-devel-20.11.1-1.module+el9.3.0+21385+bac43d5a SUSE Liberty Linux 9:nodejs-docs-20.11.1-1.module+el9.3.0+21385+bac43d5a SUSE Liberty Linux 9:nodejs-full-i18n-20.11.1-1.module+el9.3.0+21385+bac43d5a SUSE Liberty Linux 9:nodejs-nodemon-3.0.1-1.module+el9.3.0.z+20478+84a9f781 SUSE Liberty Linux 9:nodejs-packaging-2021.06-4.module+el9.3.0+19518+63aad52d SUSE Liberty Linux 9:nodejs-packaging-bundler-2021.06-4.module+el9.3.0+19518+63aad52d SUSE Liberty Linux 9:npm-10.2.4-1.20.11.1.1.module+el9.3.0+21385+bac43d5a SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-20.11.1-150500.11.6.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-devel-20.11.1-150500.11.6.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs20-docs-20.11.1-150500.11.6.1 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm20-20.11.1-150500.11.6.1 openSUSE Leap 15.5:corepack20-20.11.1-150500.11.6.1 openSUSE Leap 15.5:nodejs20-20.11.1-150500.11.6.1 openSUSE Leap 15.5:nodejs20-devel-20.11.1-150500.11.6.1 openSUSE Leap 15.5:nodejs20-docs-20.11.1-150500.11.6.1 openSUSE Leap 15.5:npm20-20.11.1-150500.11.6.1 openSUSE Tumbleweed:corepack20-20.11.1-1.1 openSUSE Tumbleweed:corepack21-21.6.2-1.1 openSUSE Tumbleweed:nodejs20-20.11.1-1.1 openSUSE Tumbleweed:nodejs20-devel-20.11.1-1.1 openSUSE Tumbleweed:nodejs20-docs-20.11.1-1.1 openSUSE Tumbleweed:nodejs21-21.6.2-1.1 openSUSE Tumbleweed:nodejs21-devel-21.6.2-1.1 openSUSE Tumbleweed:nodejs21-docs-21.6.2-1.1 openSUSE Tumbleweed:npm20-20.11.1-1.1 openSUSE Tumbleweed:npm21-21.6.2-1.1 SUSE CaaS Platform 4.0:nodejs10 SUSE CaaS Platform 4.0:nodejs10-devel SUSE CaaS Platform 4.0:nodejs10-docs SUSE CaaS Platform 4.0:nodejs8 SUSE CaaS Platform 4.0:nodejs8-devel SUSE CaaS Platform 4.0:nodejs8-docs SUSE CaaS Platform 4.0:npm10 SUSE CaaS Platform 4.0:npm8 SUSE Enterprise Storage 7.1:nodejs12 SUSE Enterprise Storage 7.1:nodejs12-devel SUSE Enterprise Storage 7.1:nodejs12-docs SUSE Enterprise Storage 7.1:nodejs14 SUSE Enterprise Storage 7.1:nodejs14-devel SUSE Enterprise Storage 7.1:nodejs14-docs SUSE Enterprise Storage 7.1:nodejs16 SUSE Enterprise Storage 7.1:nodejs16-devel SUSE Enterprise Storage 7.1:nodejs16-docs SUSE Enterprise Storage 7.1:npm12 SUSE Enterprise Storage 7.1:npm14 SUSE Enterprise Storage 7.1:npm16 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm10 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:npm8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs10 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs10-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs10-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs8 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs8-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:nodejs8-docs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm10 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm14 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:npm8 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs12-docs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs14-docs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs16 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs16-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:nodejs16-docs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:npm12 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:npm14 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:npm16 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs16 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs16-devel SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs16-docs SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs18 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs18-devel SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:nodejs18-docs SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:npm16 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:npm18 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs16 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs16-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs16-docs SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs18 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs18-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:nodejs18-docs SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:npm16 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:npm18 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs10 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs10-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs10-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs12-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs14-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs16 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs16-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs16-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs18-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6 SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs SUSE Linux Enterprise Module for Web and Scripting 12:npm10 SUSE Linux Enterprise Module for Web and Scripting 12:npm12 SUSE Linux Enterprise Module for Web and Scripting 12:npm14 SUSE Linux Enterprise Module for Web and Scripting 12:npm16 SUSE Linux Enterprise Module for Web and Scripting 12:npm18 SUSE Linux Enterprise Module for Web and Scripting 12:npm4 SUSE Linux Enterprise Module for Web and Scripting 12:npm6 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18 SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-devel SUSE Linux Enterprise Module for Web and Scripting 15 SP5:nodejs18-docs SUSE Linux Enterprise Module for Web and Scripting 15 SP5:npm18 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10-devel SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs10-docs SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8 SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-devel SUSE Linux Enterprise Server 15 SP1-LTSS:nodejs8-docs SUSE Linux Enterprise Server 15 SP1-LTSS:npm10 SUSE Linux Enterprise Server 15 SP1-LTSS:npm8 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs10 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs10-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs10-docs SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs12-docs SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs14-docs SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs8 SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs8-devel SUSE Linux Enterprise Server 15 SP2-LTSS:nodejs8-docs SUSE Linux Enterprise Server 15 SP2-LTSS:npm10 SUSE Linux Enterprise Server 15 SP2-LTSS:npm12 SUSE Linux Enterprise Server 15 SP2-LTSS:npm14 SUSE Linux Enterprise Server 15 SP2-LTSS:npm8 SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs12 SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs12-devel SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs12-docs SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs14 SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs14-devel SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs14-docs SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs16 SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs16-devel SUSE Linux Enterprise Server 15 SP3-LTSS:nodejs16-docs SUSE Linux Enterprise Server 15 SP3-LTSS:npm12 SUSE Linux Enterprise Server 15 SP3-LTSS:npm14 SUSE Linux Enterprise Server 15 SP3-LTSS:npm16 SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs16 SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs16-devel SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs16-docs SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs18 SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs18-devel SUSE Linux Enterprise Server 15 SP4-LTSS:nodejs18-docs SUSE Linux Enterprise Server 15 SP4-LTSS:npm16 SUSE Linux Enterprise Server 15 SP4-LTSS:npm18 SUSE Linux Enterprise Server 15-LTSS:nodejs10 SUSE Linux Enterprise Server 15-LTSS:nodejs10-devel SUSE Linux Enterprise Server 15-LTSS:nodejs10-docs SUSE Linux Enterprise Server 15-LTSS:nodejs8 SUSE Linux Enterprise Server 15-LTSS:nodejs8-devel SUSE Linux Enterprise Server 15-LTSS:nodejs8-docs SUSE Linux Enterprise Server 15-LTSS:npm10 SUSE Linux Enterprise Server 15-LTSS:npm8 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs10-docs SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8 SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:nodejs8-docs SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm10 SUSE Linux Enterprise Server for SAP Applications 15 SP1:npm8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs10 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs10-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs10-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs12-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs14-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs8 SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs8-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:nodejs8-docs SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm10 SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm12 SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm14 SUSE Linux Enterprise Server for SAP Applications 15 SP2:npm8 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs12-docs SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs14-docs SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs16 SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs16-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:nodejs16-docs SUSE Linux Enterprise Server for SAP Applications 15 SP3:npm12 SUSE Linux Enterprise Server for SAP Applications 15 SP3:npm14 SUSE Linux Enterprise Server for SAP Applications 15 SP3:npm16 SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs16 SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs16-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs16-docs SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs18 SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs18-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:nodejs18-docs SUSE Linux Enterprise Server for SAP Applications 15 SP4:npm16 SUSE Linux Enterprise Server for SAP Applications 15 SP4:npm18 SUSE Manager Server 4.3:nodejs16 SUSE Manager Server 4.3:nodejs16-devel SUSE Manager Server 4.3:nodejs16-docs SUSE Manager Server 4.3:nodejs18 SUSE Manager Server 4.3:nodejs18-devel SUSE Manager Server 4.3:nodejs18-docs SUSE Manager Server 4.3:npm16 SUSE Manager Server 4.3:npm18 SUSE OpenStack Cloud Crowbar 8:nodejs6 SUSE OpenStack Cloud Crowbar 9:nodejs6 important 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H