CVE-2024-53866: Deferred Json Stringify Of Mutable Object Paramcve-2024-53866-deferred-json-stringify-of-mutable-object-param
Async writer serializes a mutable object parameter to disk via JSON.stringify inside the write call. If the caller also retains a reference to the same object (for example, by inserting it into a shared in-memory cache), any mutation performed between the call and the deferred write will be persisted, allowing one execution context to poison a shared on-disk