Vulnerability in Revelrylabs Elixir-nodejs
CVE-2026-33872
elixir-nodejs provides an Elixir API for calling Node.js functions. A vulnerability in versions prior to 3.1.4 results in Cross-User Data Leakage or Information Disclosure due to a race condition in the worker protocol. The lack of request…
Vulnerability class: Race Condition
EPSS: 0.000 (11.1th percentile) — read the EPSS interpretation.
Affected products
- Revelrylabs Elixir-nodejs — versions < 3.1.4
Weakness classification (CWE)
References
- https://github.com/revelrylabs/elixir-nodejs/security/advisories/GHSA-rwcr-rpcc-3g9m (x_refsource_CONFIRM)
- https://github.com/revelrylabs/elixir-nodejs/issues/100 (x_refsource_MISC)
- https://github.com/revelrylabs/elixir-nodejs/pull/105 (x_refsource_MISC)
- https://github.com/revelrylabs/elixir-nodejs/releases/tag/v3.1.4 (x_refsource_MISC)