Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-23083

Fixed in a distro release EPSS <1%CVSS 7.7

With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.

Published 2025-01-22 · CVE record · OSV

Products: NodeJS Node

Distro releases

ReleasePackageFixed in
AlmaLinux 8nodejs1:20.18.2-1.module_el8.10.0+3958+472a6467
AlmaLinux 8nodejs1:22.13.1-1.module_el8.10.0+3961+6a788e57
AlmaLinux 8nodejs-devel1:20.18.2-1.module_el8.10.0+3958+472a6467
AlmaLinux 8nodejs-devel1:22.13.1-1.module_el8.10.0+3961+6a788e57
AlmaLinux 8nodejs-docs1:20.18.2-1.module_el8.10.0+3958+472a6467
AlmaLinux 8nodejs-docs1:22.13.1-1.module_el8.10.0+3961+6a788e57
AlmaLinux 8nodejs-full-i18n1:20.18.2-1.module_el8.10.0+3958+472a6467
AlmaLinux 8nodejs-full-i18n1:22.13.1-1.module_el8.10.0+3961+6a788e57
AlmaLinux 8nodejs-libs1:22.13.1-1.module_el8.10.0+3961+6a788e57
AlmaLinux 8nodejs-nodemon3.0.1-1.module_el8.8.0+3613+1ed8c91d
AlmaLinux 8nodejs-packaging2021.06-4.module_el8.10.0+3961+6a788e57
AlmaLinux 8nodejs-packaging2021.06-4.module_el8.7.0+3343+ea2b7901
AlmaLinux 8nodejs-packaging-bundler2021.06-4.module_el8.10.0+3958+472a6467
AlmaLinux 8nodejs-packaging-bundler2021.06-4.module_el8.10.0+3961+6a788e57
AlmaLinux 8npm1:10.8.2-1.20.18.2.1.module_el8.10.0+3958+472a6467
AlmaLinux 8npm1:10.9.2-1.22.13.1.1.module_el8.10.0+3961+6a788e57
AlmaLinux 8v8-12.4-devel3:12.4.254.21-1.22.13.1.1.module_el8.10.0+3961+6a788e57
AlmaLinux 9nodejs1:20.18.2-1.module_el9.5.0+137+381f3eaf
AlmaLinux 9nodejs1:22.13.1-1.module_el9.5.0+139+09296491
AlmaLinux 9nodejs-devel1:22.13.1-1.module_el9.5.0+139+09296491
AlmaLinux 9nodejs-devel1:20.18.2-1.module_el9.5.0+137+381f3eaf
AlmaLinux 9nodejs-docs1:20.18.2-1.module_el9.5.0+137+381f3eaf
AlmaLinux 9nodejs-docs1:22.13.1-1.module_el9.5.0+139+09296491
AlmaLinux 9nodejs-full-i18n1:20.18.2-1.module_el9.5.0+137+381f3eaf
AlmaLinux 9nodejs-full-i18n1:22.13.1-1.module_el9.5.0+139+09296491
AlmaLinux 9nodejs-libs1:22.13.1-1.module_el9.5.0+139+09296491
AlmaLinux 9nodejs-nodemon3.0.1-1.module_el9.2.0+36+853e48f5
AlmaLinux 9nodejs-nodemon3.0.1-1.module_el9.5.0+136+92f38f3c
AlmaLinux 9nodejs-packaging2021.06-4.module_el9.3.0+88+29afeaa2
AlmaLinux 9nodejs-packaging2021.06-4.module_el9.5.0+136+92f38f3c
AlmaLinux 9nodejs-packaging-bundler2021.06-4.module_el9.5.0+124+df88fe49
AlmaLinux 9nodejs-packaging-bundler2021.06-4.module_el9.5.0+139+09296491
AlmaLinux 9npm1:10.8.2-1.20.18.2.1.module_el9.5.0+137+381f3eaf
AlmaLinux 9npm1:10.9.2-1.22.13.1.1.module_el9.5.0+139+09296491
AlmaLinux 9v8-12.4-devel3:12.4.254.21-1.22.13.1.1.module_el9.5.0+139+09296491
Alpine 3.21nodejs22.13.1-r0
Alpine 3.22nodejs22.13.1-r0
Alpine 3.23nodejs22.13.1-r0
Alpine 3.24nodejs22.13.1-r0
Amazon Linux 2023nodejs201:20.18.2-1.amzn2023.0.1
Amazon Linux 2023nodejs20-devel1:20.18.2-1.amzn2023.0.1
Amazon Linux 2023nodejs20-docs1:20.18.2-1.amzn2023.0.1
Amazon Linux 2023nodejs20-full-i18n1:20.18.2-1.amzn2023.0.1
Amazon Linux 2023nodejs20-libs1:20.18.2-1.amzn2023.0.1
Amazon Linux 2023nodejs20-npm1:10.8.2-1.20.18.2.1.amzn2023.0.1
Amazon Linux 2023v8-11.3-devel3:11.3.244.8-1.20.18.2.1.amzn2023.0.1
Chainguardnodejs-2020.18.2-r0
Chainguardnodejs-2121.7.3-r12
Chainguardnodejs-2222.13.1-r0
Chainguardnodejs-2323.6.1-r0
Debian 13nodejs20.18.2+dfsg-1
Debian 14nodejs20.18.2+dfsg-1
Red Hat Enterprise Linux 8nodejs1:20.18.2-1.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8nodejs1:22.13.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-debuginfo1:22.13.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-debuginfo1:20.18.2-1.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8nodejs-debugsource1:22.13.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-debugsource1:20.18.2-1.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8nodejs-devel1:22.13.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-devel1:20.18.2-1.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8nodejs-docs1:22.13.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-docs1:20.18.2-1.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8nodejs-full-i18n1:22.13.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-full-i18n1:20.18.2-1.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8nodejs-libs1:22.13.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-libs-debuginfo1:22.13.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-nodemon0:3.0.1-1.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8nodejs-nodemon0:3.0.1-1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-packaging0:2021.06-4.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8nodejs-packaging0:2021.06-4.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-packaging-bundler0:2021.06-4.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8nodejs-packaging-bundler0:2021.06-4.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8npm1:10.9.2-1.22.13.1.1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 8npm1:10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10
Red Hat Enterprise Linux 8v8-12.4-devel3:12.4.254.21-1.22.13.1.1.module+el8.10.0+22759+46b58560
Red Hat Enterprise Linux 9nodejs1:20.18.2-1.module+el9.5.0+22758+4ad2c198
Red Hat Enterprise Linux 9nodejs1:22.13.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-debuginfo1:22.13.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-debuginfo1:20.18.2-1.module+el9.5.0+22758+4ad2c198
Red Hat Enterprise Linux 9nodejs-debugsource1:20.18.2-1.module+el9.5.0+22758+4ad2c198
Red Hat Enterprise Linux 9nodejs-debugsource1:22.13.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-devel1:20.18.2-1.module+el9.5.0+22758+4ad2c198
Red Hat Enterprise Linux 9nodejs-devel1:22.13.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-docs1:20.18.2-1.module+el9.5.0+22758+4ad2c198
Red Hat Enterprise Linux 9nodejs-docs1:22.13.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-full-i18n1:22.13.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-full-i18n1:20.18.2-1.module+el9.5.0+22758+4ad2c198
Red Hat Enterprise Linux 9nodejs-libs1:22.13.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-libs-debuginfo1:22.13.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-nodemon0:3.0.1-1.module+el9.3.0.z+20478+84a9f781
Red Hat Enterprise Linux 9nodejs-nodemon0:3.0.1-1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-packaging0:2021.06-4.module+el9.3.0+19518+63aad52d
Red Hat Enterprise Linux 9nodejs-packaging0:2021.06-4.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9nodejs-packaging-bundler0:2021.06-4.module+el9.3.0+19518+63aad52d
Red Hat Enterprise Linux 9nodejs-packaging-bundler0:2021.06-4.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9npm1:10.8.2-1.20.18.2.1.module+el9.5.0+22758+4ad2c198
Red Hat Enterprise Linux 9npm1:10.9.2-1.22.13.1.1.module+el9.5.0+22763+17233acb
Red Hat Enterprise Linux 9v8-12.4-devel3:12.4.254.21-1.22.13.1.1.module+el9.5.0+22763+17233acb
Red Hat rhel eus 9.4nodejs1:20.18.2-1.module+el9.4.0+22789+7c201776
Red Hat rhel eus 9.4nodejs-debuginfo1:20.18.2-1.module+el9.4.0+22789+7c201776
Red Hat rhel eus 9.4nodejs-debugsource1:20.18.2-1.module+el9.4.0+22789+7c201776
Red Hat rhel eus 9.4nodejs-devel1:20.18.2-1.module+el9.4.0+22789+7c201776
Red Hat rhel eus 9.4nodejs-docs1:20.18.2-1.module+el9.4.0+22789+7c201776
Red Hat rhel eus 9.4nodejs-full-i18n1:20.18.2-1.module+el9.4.0+22789+7c201776
Red Hat rhel eus 9.4nodejs-nodemon0:3.0.1-1.module+el9.3.0.z+20478+84a9f781
Red Hat rhel eus 9.4nodejs-packaging0:2021.06-4.module+el9.3.0+19518+63aad52d
Red Hat rhel eus 9.4nodejs-packaging-bundler0:2021.06-4.module+el9.3.0+19518+63aad52d
Red Hat rhel eus 9.4npm1:10.8.2-1.20.18.2.1.module+el9.4.0+22789+7c201776
Rocky Linux 8nodejs1:22.13.1-1.module+el8.10.0+1935+d3cbe60f
Rocky Linux 8nodejs1:20.18.2-1.module+el8.10.0+1932+2f13f218
Rocky Linux 8nodejs-nodemon0:3.0.1-1.module+el8.10.0+1666+930e28e8
Rocky Linux 8nodejs-packaging0:2021.06-4.module+el8.10.0+1667+4a788d89
Rocky Linux 9nodejs-nodemon0:3.0.1-1.module+el9.4.0+25495+f51dca35
Rocky Linux 9nodejs-nodemon0:3.0.1-1.module+el9.6.0+32185+bd121a25
Rocky Linux 9nodejs-nodemon0:3.0.1-1.module+el9.6.0+32144+1d29a396
Rocky Linux 9nodejs-nodemon0:3.0.1-1.module+el9.6.0+32143+ae966e5b
Rocky Linux 9nodejs-nodemon0:3.0.1-1.module+el9.6.0+32045+2e5d342d
Rocky Linux 9nodejs-nodemon0:3.0.1-1.module+el9.5.0+31770+0da7192d
Rocky Linux 9nodejs-nodemon0:3.0.1-1.module+el9.6.0+32322+a8b1fd01
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.6.0+32048+5323bb50
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.5.0+31770+0da7192d
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.6.0+32322+a8b1fd01
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.6.0+32143+ae966e5b
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.4.0+25495+f51dca35
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.6.0+32045+2e5d342d
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.6.0+32185+bd121a25
Rocky Linux 9nodejs-packaging0:2021.06-4.module+el9.6.0+32144+1d29a396
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSnodejs2020.18.2-150500.11.18.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSnodejs2020.18.2-150500.11.18.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP6nodejs2020.18.2-150600.3.9.1
SUSE Linux Enterprise Module for Web and Scripting 15 SP6nodejs2222.13.1-150600.13.6.1
SUSE Linux Enterprise Server 15 SP5-LTSSnodejs2020.18.2-150500.11.18.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5nodejs2020.18.2-150500.11.18.1
Wolfinodejs-2020.18.2-r0
Wolfinodejs-2121.7.3-r12
Wolfinodejs-2222.13.1-r0
Wolfinodejs-2323.6.1-r0
openSUSE Leap 15.6nodejs2020.18.2-150600.3.9.1
openSUSE Leap 15.6nodejs2222.13.1-150600.13.6.1
openSUSE Tumbleweednodejs2222.13.0-1.1
openSUSE Tumbleweednodejs2424.11.1-2.1
openSUSE Tumbleweednodejs2626.3.1-1.1