Security Advisory

CVE-2025-27210

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-18 22:54:27
Last updated 2025-11-04 21:09:47
Assigner hackerone
State PUBLISHED

Description

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. This vulnerability affects Windows users of `path.join` API.