CVE-2024-21890

score

<0.1

cvss

6.5

epss

0.9%

published

2024-02-20

kev added

—

first seen

2026-10-21

Node.js 20 and 21 contain a permission model issue caused by unclear documentation regarding wildcard usage, letting attackers access unintended files, exploit requires use of wildcards in permission paths.