CVE-2023-32002

score

<0.1

cvss

9.8

epss

1.6%

published

2023-08-21

kev added

—

first seen

2026-10-21

Node.js versions 16.x, 18.x, and 20.x with the experimental policy mechanism contain a vulnerability caused by the use of Module._load(), which can bypass the policy mechanism and load modules outside of the policy.json definition, letting attackers execute arbitrary modules, exploit requires using the experimental policy feature.