node
node copied to clipboard
how to query for known CVE before setting argument flag --security-revert=CVE-xxxx-xxxxx
What is the problem this feature will solve?
Will prevent node throwing an error that prevent it to run if it can be detected that setting --security-revert=CVE-xxxx-xxxxx might not be needed.
What is the feature you are proposing to solve the problem?
When running node on dockers under different architectures the --security-revert=CVE-2023-46809 is required to keep using a certain encryption padding, but based on different architecture this flag might cause node to not start at all. Instead of figuring out for which architecture this flag is needed it would be helpful to query if it can be set without compromising the running application
What alternatives have you considered?
writing scripts that try to determine from the current host if the flag should be omitted, since the node version on the different hosts are the same (21) but based on different architecture this flag might not be necessary, ex: x86_64