Known vulnerabilities in nodejs (Debian package)
Vendor:
Debian
Software:
nodejs (Debian package)
Software CPE:
cpe:2.3:o:debian:nodejs_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
59
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
24.20.0-1nodesource1
22.22.3-1nodesource1
24.16.0-1nodesource1
18.20.4+dfsg-1~deb12u2
24.15.0-1nodesource1
22.22.2-1nodesource1
20.19.2+dfsg-1+deb13u2
20.20.2-1nodesource1
24.14.1-1nodesource1
22.22.1-1nodesource1
20.20.1-1nodesource1
20.19.2+dfsg-1+deb13u1
24.14.0-1nodesource1
24.13.1-1nodesource1
20.20.0-1nodesource1
22.22.0-1nodesource1
24.13.0-1nodesource1
18.17.1-1nodesource1
24.12.0-1nodesource1
20.19.6-1nodesource1
24.11.1-1nodesource1
22.21.0-1nodesource1
22.20.0-1nodesource1
20.19.5-1nodesource1
18.20.4+dfsg-1~deb12u1
10.24.0~dfsg-1~deb10u2
10.24.0~dfsg-1~deb10u3
10.24.0~dfsg-1~deb10u4
12.18.1~dfsg-1
12.20.1~dfsg-1
12.20.1~dfsg-2
12.20.1~dfsg-3
12.20.2~dfsg-1
12.20.2~dfsg-2
12.21.0~dfsg-1
12.21.0~dfsg-2
12.21.0~dfsg-3
12.21.0~dfsg-4
12.21.0~dfsg-5
12.22.4~dfsg-1
12.22.5~dfsg-1
12.22.5~dfsg-2~11u1
12.22.5~dfsg-2
12.22.5~dfsg-3
12.22.5~dfsg-4
12.22.5~dfsg-5
12.22.5~dfsg-6
12.22.5~dfsg-7
12.22.7~dfsg-1
12.22.7~dfsg-2
12.22.9~dfsg-1
12.22.10~dfsg-1
12.22.10~dfsg-2
12.22.12~dfsg-1~deb11u2
12.22.12~dfsg-1~deb11u5
12.22.12~dfsg-1~deb11u6
12.22.12~dfsg-1~deb11u7
14.4.0~dfsg-1
14.16.0~dfsg-1
14.16.1~dfsg-1
14.17.0~dfsg-1
14.17.0~dfsg-2
16.11.1~dfsg-1
16.13.0~dfsg-1
16.13.0~dfsg-2
16.13.0~dfsg-3
16.13.0~dfsg-4
16.13.0~dfsg-5
16.13.2~dfsg-1
16.13.2~dfsg-2
16.13.2+really14.19.0~dfsg-1
16.13.2+really14.19.0~dfsg-2
16.13.2+really14.19.1~dfsg-1
16.13.2+really14.19.1~dfsg-2
16.13.2+really14.19.1~dfsg-3
16.13.2+really14.19.1~dfsg-4
16.13.2+really14.19.1~dfsg-5
16.13.2+really14.19.1~dfsg-6
16.14.2+dfsg-1
16.14.2+dfsg-2
16.14.2+dfsg-3
16.14.2+dfsg-4
16.14.2+dfsg-5
16.14.2+dfsg1-1
16.15.0+dfsg-1
16.15.1+dfsg-1
18.3.0+dfsg-1
18.4.0+dfsg-1
18.4.0+dfsg-2
18.6.0+dfsg-1
18.6.0+dfsg-2
18.6.0+dfsg-3
18.6.0+dfsg-4
18.6.0+dfsg-5
18.7.0+dfsg-1
18.7.0+dfsg-4
18.7.0+dfsg-5
18.8.0+dfsg-1
18.10.0+dfsg-1
18.10.0+dfsg-2
18.10.0+dfsg-3
18.10.0+dfsg-4
18.10.0+dfsg-5
18.10.0+dfsg-6
18.11.0+dfsg-1
18.11.0+dfsg-2
18.11.0+dfsg-3
18.11.0+dfsg-4
18.12.0+dfsg-1
18.12.1+dfsg-1
18.12.1+dfsg-2
18.12.1+dfsg-2+0.riscv64.1
18.13.0+dfsg-1
18.13.0+dfsg1-1
18.13.0+dfsg1-1.1
18.19.0+dfsg-1
18.19.0+dfsg-2
18.19.0+dfsg-3
18.19.0+dfsg-4
18.19.0+dfsg-5
18.19.0+dfsg-6
18.19.1+dfsg-1
18.19.1+dfsg-2
18.19.1+dfsg-3
18.19.1+dfsg-3.1
18.19.1+dfsg-4
18.19.1+dfsg-6
18.20.1+dfsg-1
18.20.1+dfsg-2
18.20.1+dfsg-3
18.20.1+dfsg-4
20.10.0+dfsg-1
20.12.2+dfsg-1
20.13.0+dfsg-1
20.13.1+dfsg-1
20.13.1+dfsg-2
20.14.0+dfsg-1
20.14.0+dfsg-2
20.14.0+dfsg-3
20.15.0+dfsg-1
20.15.1+dfsg-1
20.16.0+dfsg-1
20.17.0+dfsg-1
20.17.0+dfsg-2
20.18.0+dfsg-1
20.18.0+dfsg-2
20.18.1+dfsg-1
20.18.1+dfsg-2
20.18.2+dfsg-1
20.18.2+dfsg-2
20.18.2+dfsg-3
20.18.2+dfsg-4
20.18.3+dfsg-1
20.19.0+dfsg-1
20.19.0+dfsg-2
20.19.0+dfsg1-1
20.19.2+dfsg-1
20.19.4+dfsg-1
22.12.0+dfsg-1
22.12.0+dfsg-2
22.12.0+dfsg-3
22.14.0+dfsg-1
22.18.0+dfsg-1
22.18.0+dfsg+~cs22.17.2-1
22.18.0+dfsg+~cs22.17.2-2
22.15.0-1nodesource1
22.14.0-1nodesource1
20.15.0-1nodesource1
18.12.0-1nodesource1
22.17.1-1nodesource1
20.19.0-1nodesource1
18.19.0+dfsg-6~deb12u2
20.5.1-deb-1nodesource1
18.20.8-1nodesource1
22.18.0-1nodesource1
22.13.1-1nodesource1
20.19.4-1nodesource1
18.17.1-deb-1nodesource1
18.19.0+dfsg-6~deb12u1
12.22.12~dfsg-1~deb11u4
12.22.12~dfsg-1~deb11u3
12.22.12~dfsg-1~deb11u1
10.24.0~dfsg-1~deb10u1
10.23.1~dfsg-1~deb10u1
12.19.0~dfsg
12.19.0~dfsg-1
14.13.0~dfsg
14.13.0~dfsg-1
14.12.0~dfsg
14.12.0~dfsg-1
14.11.0~dfsg-2
14.11.0~dfsg
14.11.0~dfsg-1
12.18.4~dfsg
12.18.4~dfsg-1
14.9.0~dfsg
14.9.0~dfsg-1
14.8.0~dfsg
14.8.0~dfsg-1
14.7.0~dfsg
14.7.0~dfsg-1
12.18.3~dfsg-4
12.18.3~dfsg-3
14.4.0~dfsg
14.4.0~dfsg-2
12.18.3~dfsg
12.18.3~dfsg-2
12.18.3~dfsg-1
12.18.2~dfsg
12.18.2~dfsg-1
10.21.0~dfsg
12.18.0~dfsg-2
12.18.0~dfsg-3
4.2.2~dfsg-1+b1
4.4.7~dfsg-2+b1
4.7.2~dfsg-2+b1
5.0.0~dfsg-1+b1
8.11.1~dfsg-2+b1
10.15.0~dfsg-10+b1
10.20.1~dfsg-1+b1
10.21.0~dfsg-1~deb10u1
10.21.0~dfsg-1
12.16.3~dfsg-1
12.16.3~dfsg-2
12.17.0~dfsg-1
12.17.0~dfsg-2
12.17.0~dfsg-3
12.17.0~dfsg-4
12.18.0~dfsg-1
10.19.0~dfsg1-1
12.16.2~dfsg
12.16.2~dfsg-2
12.16.2~dfsg-1
12.13.1~dfsg
10.20.1~dfsg
10.19.0~dfsg
10.15.3~dfsg
10.15.2~dfsg
8.11.1~dfsg
4.8.2~dfsg
0.10.29~dfsg
10.20.1~dfsg-1
10.20.0~dfsg-1
10.19.0~dfsg-3
10.19.0~dfsg-2
10.19.0~dfsg-1
12.13.1~dfsg-1
12.13.0~dfsg-1
10.17.0~dfsg-2
10.17.0~dfsg-1
10.16.3~dfsg-1
12.10.0~dfsg-1
12.10.0~dfsg-2
12.8.0~dfsg-1
12.8.0~dfsg-2
12.7.0~dfsg-1
12.1.0~dfsg-1
10.15.2~dfsg-2
10.15.3~dfsg-1
10.15.2~dfsg-1
10.15.1~dfsg-5
10.15.1~dfsg-3
10.15.1~dfsg-4
10.15.1~dfsg-2
10.15.1~dfsg-1
10.15.0~dfsg-10
10.15.0~dfsg-9
10.15.0~dfsg-8
10.15.0~dfsg-7
10.15.0~dfsg-6
10.15.0~dfsg-5
10.15.0~dfsg-4
10.15.0~dfsg-2
10.15.0~dfsg-1
10.12.0~dfsg-1
10.13.0~dfsg-1
10.13.0~dfsg-3
0.6.19~dfsg1-7
0.10.20~dfsg1-1~bpo7+1
0.10.21~dfsg1-1~bpo7+1
0.10.26~dfsg1-1~bpo70+1
8.11.1~dfsg-2~bpo9+1
8.11.2~dfsg-1
10.4.0~dfsg-1
10.3.0~dfsg-1
10.1.0~dfsg-1
10.0.0~dfsg1-4
10.0.0~dfsg1-3
10.0.0~dfsg-2
10.0.0~dfsg-1
8.11.1~dfsg-2
8.11.1~dfsg-1
8.10.0~dfsg-2
8.10.0~dfsg-1
8.9.3~dfsg-12
8.9.3~dfsg-11
8.9.3~dfsg-10
8.9.3~dfsg-9
8.9.3~dfsg-8
8.9.3~dfsg-7
8.9.3~dfsg-6
8.9.3~dfsg-5
8.9.3~dfsg-4
8.9.3~dfsg-3
8.9.3~dfsg-2
8.9.3~dfsg-1
6.12.0~dfsg-2
6.12.0~dfsg-1
6.11.4~dfsg-1
6.11.3~dfsg-1
6.11.2~dfsg-5
6.11.2~dfsg-4
6.11.2~dfsg-3
6.11.2~dfsg-2
6.11.2~dfsg-1
4.8.3~dfsg-1
4.8.4~dfsg-1
0.10.29~dfsg-1.1
0.10.29~dfsg-2
0.10.29~dfsg-1~bpo70+1
4.2.6~dfsg-1
4.3.0~dfsg-1
4.3.0~dfsg-2
4.3.1~dfsg-1
4.3.1~dfsg-2
4.3.1~dfsg-3
4.4.0~dfsg-1
4.4.1~dfsg-1
4.4.2~dfsg-1
4.4.3~dfsg-1
4.4.5~dfsg-1
4.4.6~dfsg-1
4.4.7~dfsg-1
4.4.7~dfsg-2
4.6.0~dfsg-1
4.6.0~dfsg-2
4.6.0~dfsg-3
4.6.1~dfsg-1
4.7.2~dfsg-1
4.7.2~dfsg-2
4.7.2~dfsg-2~bpo8+1
4.8.1~dfsg-1
4.8.2~dfsg-1
4.8.2~dfsg-1~bpo8+1
0.1.27+dfsg-1
0.1.33-1
0.1.33-2
0.1.33-3
0.1.92-1
0.1.94-1
0.1.94-2
0.1.95-1
0.1.97-1
0.1.99-1
0.1.101-1
0.1.101-2
0.1.102-1
0.1.104-1
0.2.0-1
0.2.2-1
0.2.6-1
0.2.6-2
0.2.6-3
0.2.6-4
0.2.6-5
0.4.2-1
0.4.6-1
0.4.6-2
0.4.7-1
0.4.8-1
0.4.9-1
0.4.10-1
0.4.11-1
0.4.12-1
0.4.12-2
0.4.12-3
0.6.8~dfsg1-1
0.6.10~dfsg2-1
0.6.10~dfsg2-2
0.6.11~dfsg1-1
0.6.11~dfsg1-2
0.6.12~dfsg1-1
0.6.14~dfsg1-1
0.6.16~dfsg1-1
0.6.16~dfsg1-2
0.6.17~dfsg1-1
0.6.18~dfsg1-1
0.6.19~dfsg1-1
0.6.19~dfsg1-2
0.6.19~dfsg1-3
0.6.19~dfsg1-4
0.6.19~dfsg1-5
0.6.19~dfsg1-6
0.10.0~dfsg1-1
0.10.0~dfsg1-2
0.10.1~dfsg1-1
0.10.1~dfsg1-2
0.10.5~dfsg1-1
0.10.5~dfsg1-2
0.10.6~dfsg1-1
0.10.7~dfsg1-1
0.10.8~dfsg1-1
0.10.9~dfsg1-1
0.10.10~dfsg1-1
0.10.11~dfsg1-1
0.10.13~dfsg1-1
0.10.13~dfsg1-2
0.10.15~dfsg1-1
0.10.15~dfsg1-2
0.10.15~dfsg1-3
0.10.15~dfsg1-4
0.10.17~dfsg1-1
0.10.17~dfsg1-2
0.10.18~dfsg1-1
0.10.19~dfsg1-1
0.10.20~dfsg1-1
0.10.21~dfsg1-1
0.10.22~dfsg1-1
0.10.22~dfsg1-2
0.10.23~dfsg1-1
0.10.23~dfsg1-2
0.10.23~dfsg1-3
0.10.24~dfsg1-1
0.10.25~dfsg1-1
0.10.25~dfsg2-1
0.10.25~dfsg2-2
0.10.26~dfsg1-1
0.10.26~dfsg1-2
0.10.28~dfsg-1
0.10.28~dfsg-2
0.10.29~dfsg-1
0.10.38~dfsg-1
4.0.0~dfsg-1
4.0.0~dfsg-2
4.1.0~dfsg-1
4.1.0~dfsg-2
4.1.0~dfsg-3
4.1.1~dfsg-1
4.1.1~dfsg-2
4.1.1~dfsg-3
4.1.2~dfsg-1
4.1.2~dfsg-2
4.1.2~dfsg-3
4.1.2~dfsg-4
4.1.2~dfsg-5
4.2.0~dfsg-1
4.2.0~dfsg-2
4.2.1~dfsg-1
4.2.1~dfsg-2
4.2.2~dfsg-1
4.2.3~dfsg-1
4.2.3~dfsg-2
4.2.4~dfsg-1
4.2.4~dfsg-2
4.2.5~dfsg-1
5.0.0~dfsg-1
5.1.0~dfsg-1
5.1.1~dfsg-1
5.3.0~dfsg-1
5.3.0~dfsg-2
5.4.0~dfsg-1
5.4.1~dfsg-1
5.5.0~dfsg-1
5.6.0~dfsg-1
5.7.0~dfsg-1
5.7.1~dfsg-1
5.8.0~dfsg-1
5.9.1~dfsg-1
5.10.1~dfsg-1
5.11.0~dfsg-1
6.0.0~dfsg-1
6.8.0~dfsg-1
6.8.1~dfsg-1
6.8.1~dfsg-2
6.9.0~dfsg-1
6.9.1~dfsg-1
6.9.2~dfsg-1
6.9.2~dfsg-2
6.9.3~dfsg-1
6.10.1~dfsg-1
6.10.2~dfsg-1
6.11.0~dfsg-1
6.11.1~dfsg-1
Vulnerabilities (59)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-55131 |
CWE-362 | Low | 18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 17 more |
||
| #VU126387 - Improper Link Resolution Before File Access ('Link Following') CVE-2025-55130 |
CWE-59 | Low | 20.19.2+dfsg-1+deb13u1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 17 more |
||
| #VU126388 - Uncaught Exception CVE-2025-59465 |
CWE-248 | Medium | 18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 20 more |
||
| #VU126389 - Uncaught Exception CVE-2025-59466 |
CWE-248 | Medium | 18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 14 more |
||
| #VU126392 - Improper Access Control CVE-2025-55132 |
CWE-284 | Low | 20.19.2+dfsg-1+deb13u1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 13 more |
||
| #VU124546 - Missing release of memory after effective lifetime CVE-2026-21714 |
CWE-401 | Medium | 18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u2 | 25.03.2026 |
SB20260325154 SB2026032902 SB20260415182 and 20 more |
||
| #VU124547 - Creation of chroot Jail Without Changing Working Directory CVE-2026-21717 |
CWE-243 | Medium | 20.19.2+dfsg-1+deb13u2 | 25.03.2026 |
SB20260325154 SB2026032902 SB20260415182 and 17 more |
||
| #VU124548 - Improper Access Control CVE-2026-21715 |
CWE-284 | Low | 20.19.2+dfsg-1+deb13u2 | 25.03.2026 |
SB20260325154 SB2026032902 SB2026041564 and 18 more |
||
| #VU124549 - Improper Access Control CVE-2026-21716 |
CWE-284 | Low | 20.19.2+dfsg-1+deb13u2 | 25.03.2026 |
SB20260325154 SB2026032902 SB20260415182 and 18 more |
||
| #VU124541 - DEPRECATED: Often Misused: Path Manipulation CVE-2026-21637 |
CWE-249 | High | 20.19.2+dfsg-1+deb13u1, 20.19.2+dfsg-1+deb13u2 | 25.03.2026 |
SB2026032902 SB20260415182 SB20260415187 and 26 more |
||
| #VU124542 - Error Handling CVE-2026-21710 |
CWE-388 | Medium | 18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u2 | 25.03.2026 |
SB20260325154 SB2026032902 SB2026041056 and 29 more |
||
| #VU124545 - Information Exposure Through Timing Discrepancy CVE-2026-21713 |
CWE-208 | Medium | 18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u2 | 25.03.2026 |
SB20260325154 SB2026032902 SB2026041543 and 19 more |
||
| #VU114773 - Out-of-bounds read CVE-2025-47153 |
CWE-125 | Medium | 18.20.4+dfsg-1~deb12u1 | 03.09.2025 |
SB2025090382 |
||
| #VU109241 - Error Handling CVE-2025-23166 |
CWE-388 | Medium | 18.20.4+dfsg-1~deb12u2 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051902 and 28 more |
||
| #VU103225 - Missing release of memory after effective lifetime CVE-2025-23085 |
CWE-401 | Medium | 18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u1 | 22.01.2025 |
SB2025012252 SB2025012439 SB2025012440 and 29 more |
||
| #VU93880 - Server-Side Request Forgery (SSRF) CVE-2024-22020 |
CWE-918 | Medium | 18.20.4+dfsg-1~deb12u1 | 09.07.2024 |
SB2024070937 SB2024071636 SB20240717119 and 30 more |
||
| #VU86733 - Improper input validation CVE-2024-22025 |
CWE-20 | Medium | 18.20.4+dfsg-1~deb12u1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 34 more |
||
| #VU86724 - Covert Timing Channel CVE-2023-46809 |
CWE-385 | Medium | 18.20.4+dfsg-1~deb12u1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 35 more |
||
| #VU86721 - Improper input validation CVE-2024-22019 |
CWE-20 | Medium | 18.20.4+dfsg-1~deb12u1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 48 more |
||
| #VU86718 - Improper Handling of Exceptional Conditions CVE-2024-21892 |
CWE-755 | Low | 18.20.4+dfsg-1~deb12u1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 30 more |
Showing elements 1 - 20 out of 59