ALPINE-CVE-2020-8252High · CVSS 7.8Fix availableALPINE-CVE-2020-8252The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is longer than 256 bytes.libuvOperating systemsUpdate to 1.38.1-r0Published September 18, 2020Updated September 11, 2026Source advisory 1 ↗Source advisory 2 ↗