Toot

Written by Alexandre Dulaunoy on 2025-01-22 at 09:36

Interesting approach to CVE allocation: announcing End-of-Life (EOL) versions of Node.js. I haven't notice this practice before.

Not entirely sure about the objective. Does this mean the Node.js team plans to restrict CVE creation for older, unmaintained versions of Node.js?

[#]nodejs #cve #vulnerability #infosec #cybersecurity

🔗 https://vulnerability.circl.lu/vuln/cve-2025-23089

=> View attached media

=> More informations about this toot | View the thread | More toots from adulau@infosec.exchange

Mentions

Tags

=> View nodejs tag | View cve tag | View vulnerability tag | View infosec tag | View cybersecurity tag