VDB

GCVE-VVD-MAGEIA-2023-264

GCVE-VVD-MAGEIA-2023-264
Advisory Published
Vulnetix · Advisory published September 24, 2023
This is a security release. As well, it fixes v8 headers detection (mga#28809) The following CVEs are fixed in this release: CVE-2023-32002: Policies can be bypassed via Module._load (High) CVE-2023-32006: Policies can be bypassed by module.constructor.createRequire (Medium) CVE-2023-32559: Policies can be bypassed via process.binding (Medium) OpenSSL Security Releases OpenSSL security advisory 14th July. OpenSSL security advisory 19th July. OpenSSL security advisory 31st July More detailed information on each of the vulnerabilities can be found in August 2023 Security Releases blog post.

Affected Products

VendorProductVersionsPlatforms
Mageianodejs0 (affected), 18.17.1-1.mga8 (unaffected)
Mageianodejs0 (affected), 18.17.1-1.mga9 (unaffected)
Mageiayarnpkg0 (affected), 1.22.19-13.mga9 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›