Month: September 2023

HackerOne Bug Bounty Disclosure: b-process-binding-can-bypass-the-permission-model-through-path-traversal-b-rafaelgss

Company Name: b'Node.js' Company HackerOne URL: https://hackerone.com/nodejs Submitted By:b'rafaelgss'Link to Submitters Profile:https://hackerone.com/b'rafaelgss' Report Title:b'process.binding() can bypass the permission model through...

HackerOne Bug Bounty Disclosure: b-fs-statfs-bypasses-permission-model-b-rafaelgss

Company Name: b'Node.js' Company HackerOne URL: https://hackerone.com/nodejs Submitted By:b'rafaelgss'Link to Submitters Profile:https://hackerone.com/b'rafaelgss' Report Title:b'fs.statfs bypasses Permission Model'Report Link:https://hackerone.com/reports/2051224Date Submitted:10 September...