CVE-2023-30581

score

<0.1

cvss

7.5

epss

1.1%

published

2023-11-23

kev added

—

first seen

2026-10-21

Node.js <version> contains a vulnerability where the use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outside of the policy.json definition, letting attackers load unauthorized modules, exploit requires attacker to execute code with access to process object.