node/lib/internal
RafaelGSS 28dcd38864
permission: disable FileHandle utimes with permission model
PR-URL: https://github.com/nodejs-private/node-private/pull/873
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
CVE-ID: CVE-2026-48935
Refs: https://hackerone.com/reports/3625987
2026-06-17 19:52:20 +02:00
..
assert assert: use a set instead of an array for faster lookup 2026-02-24 00:37:09 +01:00
async_local_storage
bootstrap vm: sync-ify SourceTextModule linkage 2025-10-11 22:51:07 +02:00
child_process child_process: treat ipc length header as unsigned uint32 2026-02-24 08:38:58 +01:00
cluster cluster: fix port reuse between cluster 2026-02-24 08:38:54 +01:00
console console: optimize single-string logging 2026-02-24 00:36:28 +01:00
crypto lib: backport _tls_common and _tls_wrap refactors 2026-03-16 17:29:52 +01:00
debugger lib: use FastBuffer for empty buffer allocation 2026-02-24 00:36:56 +01:00
dns dns,net: reject hostnames with embedded NUL bytes 2026-06-17 19:52:19 +02:00
errors lib: add source map support for assert messages 2025-10-07 17:29:34 +02:00
events
fs permission: disable FileHandle utimes with permission model 2026-06-17 19:52:20 +02:00
http2 http2: cap originSet size to prevent unbounded memory growth 2026-06-17 19:52:19 +02:00
inspector inspector: inspect HTTP response body 2026-02-24 00:36:44 +01:00
legacy
main src: fix timing of snapshot serialize callback 2026-02-19 18:46:22 +01:00
modules esm: fix path normalization in finalizeResolution 2026-05-11 16:10:17 +02:00
per_context perf_hooks: fix stack overflow error 2026-02-24 00:36:53 +01:00
perf perf_hooks: fix stack overflow error 2026-02-24 00:36:53 +01:00
process permission: handle process.chdir on writereport 2026-06-17 19:52:19 +02:00
quic lib: fix typo in QuicSessionStats 2026-02-17 19:16:41 +01:00
readline repl: fix pasting after moving the cursor to the left 2026-02-17 16:19:29 +01:00
repl repl: add isValidParentheses check before wrap input 2025-10-07 16:07:13 +02:00
source_map lib: fix source map url parse in dynamic imports 2026-05-11 16:10:16 +02:00
streams stream: fix decoded fromList chunk boundary check 2026-05-11 16:10:16 +02:00
test
test_runner lib: enforce use of URLParse 2026-02-24 00:37:06 +01:00
tls tls: bind reusable sessions to authenticated host 2026-06-17 19:52:19 +02:00
util assert,util: fix deep comparison for sets and maps with mixed types 2026-02-24 08:38:56 +01:00
v8 src: fix timing of snapshot serialize callback 2026-02-19 18:46:22 +01:00
vm vm: make vm.Module.evaluate() conditionally synchronous 2026-02-19 18:46:01 +01:00
watch_mode
webstreams stream: fix isErrored/isWritable for WritableStreams 2026-02-24 00:37:03 +01:00
worker
abort_controller.js
assert.js
async_context_frame.js
async_hooks.js lib: remove redundant destroyHook checks 2026-02-17 19:12:19 +01:00
blob.js
blocklist.js
buffer.js src,lib: refactor unsafe buffer creation to remove zero-fill toggle 2026-01-09 18:11:49 -03:00
child_process.js
cli_table.js
constants.js
data_url.js
dgram.js
encoding.js lib: gbk decoder is gb18030 decoder per spec 2026-02-24 00:37:10 +01:00
error_serdes.js
errors.js http2: cap originSet size to prevent unbounded memory growth 2026-06-17 19:52:19 +02:00
event_target.js events: remove redundant todo 2026-02-24 08:38:58 +01:00
file.js
fixed_queue.js
freelist.js
freeze_intrinsics.js
heap_utils.js
histogram.js
http.js lib,test: redact proxy credentials in tunnel errors 2026-06-17 19:52:19 +02:00
inspector_async_hook.js
inspector_network_tracking.js inspector: add http2 tracking support 2025-09-20 06:15:54 +00:00
js_stream_socket.js
linkedlist.js
mime.js util: optimize toASCIILower function using V8s native toLowerCase 2026-02-24 00:37:10 +01:00
navigator.js
net.js lib: simplify IPv6 checks in isLoopback() 2025-09-20 03:33:00 +00:00
options.js
priority_queue.js lib: optimize priority queue 2025-10-22 23:44:03 +02:00
promise_hooks.js
querystring.js
README.md
repl.js
socket_list.js
socketaddress.js lib: enforce use of URLParse 2026-02-24 00:37:06 +01:00
stream_base_commons.js
timers.js lib: remove redundant destroyHook checks 2026-02-17 19:12:19 +01:00
trace_events_async_hooks.js
tty.js
url.js url: add fast path to getPathFromURL decoder 2026-02-24 00:37:11 +01:00
util.js http2: remove support for priority signaling 2026-06-16 14:24:43 +02:00
v8_prof_polyfill.js
v8_prof_processor.js
validators.js dns,net: reject hostnames with embedded NUL bytes 2026-06-17 19:52:19 +02:00
vm.js
wasm_web_api.js
watchdog.js
webidl.js
webstorage.js
worker.js worker: add cpu profile APIs for worker 2025-09-20 06:16:09 +00:00

Internal Modules

The modules located in lib/internal directory are exclusively meant for internal usage within the Node.js core. They are not intended to be accessed via user modules require(). These modules may change at any point in time. Relying on these internal modules outside the core is not supported and can lead to unpredictable behavior.

In certain scenarios, accessing these internal modules for debugging or experimental purposes might be necessary. Node.js provides the --expose-internals flag to expose these modules to userland code. This flag only exists to assist Node.js maintainers with debugging internals. It is not meant for use outside the project.