Copy link to clipboard
Copied
Photoshop 2021 ships with an end of support version of NodeJS that is currently vulnerable to a number of vulnerabilities that will not be fixed. This then results in vulnerability warnings in Microsoft Defender and other vulnerability scanning tools.
C:\Program Files\Adobe\Adobe Photoshop 2021\node.exe: v8.11.1
I attempted to talk to both Adobe Customer Support and Security Operations about this, and this is my last resort.
For others experiencing the same problem, I am aware that the node.exe executable can be deleted, or even upgrade NodeJS in place - I did want to bring this to Adobe's notice just on the off chance they can rev Node in a future update.
Copy link to clipboard
Copied
Copy link to clipboard
Copied
Thanks for the heads up @kglad
Copy link to clipboard
Copied
you're welcome.
Copy link to clipboard
Copied
I went on support with the Adobe Engineer. He said that the node.exe in photoshop was indeed out of date. He will have it updated on the next photoshop update.
He did suggest copying the node file from C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\ and pasting it into photoshop and replacing it (backing up the old node file first).
This is something you do at your own risk, I will wait for the next update.