doc: mention node:wasi in the Threat Model

PR-URL: #51211 Reviewed-By: Michael Dawson <[email protected]> Reviewed-By: Marco Ippolito <[email protected]>
nodejs · Jan 2, 2024 · c13a5c0 · c13a5c0
1 parent 83a99cc
commit c13a5c0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -124,6 +124,8 @@ lead to a loss of confidentiality, integrity, or availability.
    end being on the local machine or remote.
 6. The file system when requiring a module.
    See <https://nodejs.org/api/modules.html#all-together>.
+7. The `node:wasi` module does not currently provide the comprehensive file
+   system security properties provided by some WASI runtimes.
 
 Any unexpected behavior from the data manipulation from Node.js Internal
 functions may be considered a vulnerability if they are exploitable via