Detections
Analytics
CVE-2026-48935
high
Description
A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. --allow-fs-read. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26. Thank you, to muhammaddaffa for reporting this vulnerability and thank you RafaelGSS for fixing it.