CVE-2025-23084

score

<0.1

cvss

5.5

epss

1.6%

published

2025-01-28

kev added

—

first seen

2026-10-21

Node.js on Windows contains a path handling vulnerability caused by improper treatment of drive names in path.join, letting relative paths refer to root directory, exploit requires Windows environment.