What is GHSA-rv82-5vqw-69hj?

GHSA-rv82-5vqw-69hj is a security advisory published by GitHub Security Advisories with Low severity. A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()`...

Which CVE IDs does GHSA-rv82-5vqw-69hj cover?

GHSA-rv82-5vqw-69hj covers the following CVE IDs: CVE-2026-48617. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rv82-5vqw-69hj?

GHSA-rv82-5vqw-69hj has a CVSS v3 base score of 1.8, published by GitHub Security Advisories.

GHSA-rv82-5vqw-69hjLowCVSS 1.8

A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()`...

Vendor

GitHub Security Advisories

Published

June 18, 2026

Last Modified

June 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-48617 →

📋 Description

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport() Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-48617
https://nodejs.org/en/blog/vulnerability/june-2026-security-releases
http://hackerone.com/reports/3692858
https://github.com/advisories/GHSA-rv82-5vqw-69hj