VDB
GCVE-VVD-MAGEIA-2023-264
GCVE-VVD-MAGEIA-2023-264
Advisory Published
This is a security release. As well, it fixes v8 headers detection
(mga#28809)
The following CVEs are fixed in this release:
CVE-2023-32002: Policies can be bypassed via Module._load (High)
CVE-2023-32006: Policies can be bypassed by
module.constructor.createRequire (Medium)
CVE-2023-32559: Policies can be bypassed via process.binding (Medium)
OpenSSL Security Releases
OpenSSL security advisory 14th July.
OpenSSL security advisory 19th July.
OpenSSL security advisory 31st July
More detailed information on each of the vulnerabilities can be found in
August 2023 Security Releases blog post.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | nodejs | 0 (affected), 18.17.1-1.mga8 (unaffected) | — |
| Mageia | nodejs | 0 (affected), 18.17.1-1.mga9 (unaffected) | — |
| Mageia | yarnpkg | 0 (affected), 1.22.19-13.mga9 (unaffected) | — |
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.