← Database

CVE-2025-27210

HIGH CVSS: 7.5 Published: 2025-07-18 Modified: 2026-06-17

Description

An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. This vulnerability affects Windows users of `path.join` API.

Affected Platforms

Unknown

Weakness Type

CWE-22

References