Threats tagged 'bit-node-2025-23084'

A medium severity vulnerability (CVE-2025-23084) has been identified in Node.js affecting the handling of drive names on Windows. The issue arises because certain Node.js functions, specifically the path.join API, do not treat drive names as special cases. This causes paths assumed to be relative to actually refer to the root directory, potentially leading to incorrect path resolution.