← CVE Intelligence

CVE-2025-27210

nodejs / node PUBLISHED

Description (CNA)

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. This vulnerability affects Windows users of `path.join` API.

Affected (CNA)

Vendor / productVersions
nodejs / nodeaffected 20.0.0 before 20.19.4; affected 22.0.0 before 22.17.1; affected 24.0.0 before 24.4.1
nodejs / nodejsaffected 4.0 before 4.*; affected 5.0 before 5.*; affected 6.0 before 6.*; affected 7.0 before 7.*; affected 8.0 before 8.*; affected 9.0 before 9.*; affected 10.0 before 10.*; affected 11.0 before 11.*; affected 12.0 before 12.*; affected 13.0 before 13.*; affected 14.0 before 14.*; affected 15.0 before 15.*; affected 16.0 before 16.*; affected 17.0 before 17.*; affected 18.0 before 18.*; affected 19.0 before 19.*

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.