An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.
{
"versions": [
{
"introduced": "14.0.0"
},
{
"last_affected": "14.14.0"
},
{
"introduced": "14.0.0"
},
{
"fixed": "14.21.3"
},
{
"introduced": "16.0.0"
},
{
"last_affected": "16.12.0"
},
{
"introduced": "16.0.0"
},
{
"fixed": "16.19.1"
},
{
"introduced": "18.0.0"
},
{
"last_affected": "18.11.0"
},
{
"introduced": "18.0.0"
},
{
"fixed": "18.14.1"
},
{
"introduced": "19.0.0"
},
{
"fixed": "19.6.1"
},
{
"introduced": "0"
},
{
"last_affected": "10.0"
}
]
}