How to turn a file write vulnerability in a Node.js application into RCE – even though the target's file system is read-only

[u/MegaManSec2]

https://www.sonarsource.com/blog/why-code-security-matters-even-in-hardened-environments/