mirror of https://github.com/zebrajr/node.git synced 2026-01-15 12:15:26 +00:00

Files

RafaelGSS e9f395e77a lib: use cache fs internals against path traversal

PR-URL: https://github.com/nodejs-private/node-private/pull/516
Fixes: https://hackerone.com/bugs?subject=nodejs&report_id=2259914
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
CVE-ID: CVE-2024-21891

2024-02-14 14:27:35 -03:00

assert

…

bootstrap

lib: enable WebSocket by default

2024-02-04 14:03:39 +00:00

child_process

…

cluster

…

console

console: treat non-strings as separate argument in console.assert()

2023-11-01 17:54:05 +00:00

crypto

crypto: use EVP_MD_fetch and cache EVP_MD for hashes

2024-01-05 22:16:27 +00:00

debugger

…

dns

dns: call handle.setServers() with a valid array

2023-11-21 20:56:02 +00:00

events

…

fs: protect against modified Buffer internals in possiblyTransformPath

2024-02-14 14:27:34 -03:00

http2

http2: close idle connections when allowHTTP1 is true

2024-02-01 14:45:38 +00:00

legacy

…

main

watch: fix infinite loop when passing --watch=true flag

2023-12-16 20:39:49 +00:00

modules

vm: support using the default loader to handle dynamic import()

2024-02-01 11:45:42 +00:00

per_context

lib: move function declaration outside of loop

2023-12-23 01:51:47 +01:00

perf

perf_hooks: implement performance.now() with fast API calls

2023-11-17 23:59:26 +00:00

policy

policy: use tamper-proof integrity check function

2023-10-13 18:03:19 -03:00

process

lib: use cache fs internals against path traversal

2024-02-14 14:27:35 -03:00

readline

…

repl

…

source_map

vm: support using the default loader to handle dynamic import()

2024-02-01 11:45:42 +00:00

streams

stream: fix fd is null when calling clearBuffer

2023-12-07 18:21:19 +00:00

test

…

test_runner

lib: allow checking the test result from afterEach

2024-01-19 14:56:06 +00:00

tls

tls: fix order of setting cipher before setting cert and key

2023-11-16 14:40:37 +00:00

util

assert,crypto: make KeyObject and CryptoKey testable for equality

2023-12-17 12:55:38 +00:00

…

vm: use import attributes instead of import assertions

2023-10-23 17:30:05 +00:00

watch_mode

watch: clarify that the fileName parameter can be null

2023-12-30 21:30:15 +00:00

webstreams

stream: fix cloned webstreams not being unref correctly

2024-01-23 06:31:45 +00:00

worker

…

abort_controller.js

…

assert.js

…

async_hooks.js

…

blob.js

lib: reduce overhead of blob clone

2023-10-17 06:23:40 +00:00

blocklist.js

…

buffer.js

…

child_process.js

errors: improve hideStackFrames

2023-11-11 16:25:08 +00:00

cli_table.js

lib: align console.table row to the left

2023-10-28 01:14:22 +00:00

constants.js

…

dgram.js

…

encoding.js

stream: implement min option for ReadableStreamBYOBReader.read

2024-01-04 12:57:14 +01:00

error_serdes.js

…

errors.js

sea: support embedding assets

2024-02-02 15:25:34 +01:00

event_target.js

lib: make event static properties non writable and configurable

2023-11-10 12:26:12 +00:00

file.js

lib,src: replace toUSVString with toWellFormed()

2023-11-29 16:00:57 +00:00

fixed_queue.js

…

freelist.js

…

freeze_intrinsics.js

lib: fix use of --frozen-intrinsics with --jitless

2023-12-23 12:38:24 +00:00

heap_utils.js

…

histogram.js

perf_hooks: reduce overhead of createHistogram

2023-10-23 12:38:54 +00:00

http.js

…

idna.js

…

inspector_async_hook.js

…

js_stream_socket.js

http2: add server handshake utility

2024-01-12 16:09:48 +00:00

linkedlist.js

…

mime.js

util: pass invalidSubtypeIndex instead of trimmedSubtype to error

2023-12-25 04:29:00 +00:00

navigator.js

lib: add navigator.language & navigator.languages

2023-11-04 18:07:42 +00:00

net.js

errors: improve hideStackFrames

2023-11-11 16:25:08 +00:00

options.js

…

priority_queue.js

test_runner: add Date to the supported mock APIs

2023-10-23 11:23:12 +00:00

promise_hooks.js

…

querystring.js

…

readme.md

…

repl.js

…

socket_list.js

…

socketaddress.js

…

stream_base_commons.js

errors: improve hideStackFrames

2023-11-11 16:25:08 +00:00

timers.js

…

trace_events_async_hooks.js

…

tty.js

…

url.js

url: remove #context from URLSearchParams

2024-01-24 14:36:36 +00:00

util.js

lib,src: replace toUSVString with toWellFormed()

2023-11-29 16:00:57 +00:00

v8_prof_polyfill.js

…

v8_prof_processor.js

…

validators.js

stream: implement min option for ReadableStreamBYOBReader.read

2024-01-04 12:57:14 +01:00

vm.js

vm: support using the default loader to handle dynamic import()

2024-02-01 11:45:42 +00:00

wasm_web_api.js

…

watchdog.js

…

webidl.js

stream: treat compression web stream format per its WebIDL definition

2023-11-12 10:01:51 +00:00

worker.js

test: update flag to disable SharedArrayBuffer

2023-10-10 08:27:59 +02:00

readme.md

Internal Modules

The modules in lib/internal are intended for internal use in Node.js core only, and are not accessible with require() from user modules. These modules can be changed at any time. Reliance on these modules outside of core is not supported in any way.