Multiple Node.js CVEs

Fortinet PSIRT advisories covering numerous vulnerabilities across Fortinet products and bundled components, including multiple critical and high-severity authentication bypasses, arbitrary file write/path traversal, remote code execution, command and SQL injection, information disclosure, denial of service, access-control flaws, and third-party Node.js/OpenSSL issues. The most urgent item is an unauthenticated path-traversal and NULL-byte flaw reportedly exploited in the wild, enabling arbitrary file writes. Several advisories carry CVSS scores of 9.6–9.9, while the Node.js bulletin includes