Known vulnerabilities in nodejs (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:nodejs_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 74
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs (Debian package) nodejs (Debian package) is affected by 74 known vulnerabilities: 3 high, 58 medium, 13 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140038 - Resource exhaustion
CVE-2026-56846
CWE-400 Medium
No
No
20.19.2+dfsg-1+deb13u3 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 11 more
#VU140039 - Use After Free
CVE-2026-56848
CWE-416 Medium
No
No
20.19.2+dfsg-1+deb13u3 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 11 more
#VU140041 - Authentication Bypass by Primary Weakness
CVE-2026-56850
CWE-305 Low
No
No
20.19.2+dfsg-1+deb13u3 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 5 more
#VU140046 - Improper Access Control
CVE-2026-56847
CWE-284 Low
No
No
20.19.2+dfsg-1+deb13u3 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 2 more
#VU140047 - Improper Access Control
CVE-2026-58039
CWE-284 Low
No
No
20.19.2+dfsg-1+deb13u3 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 2 more
#VU135014 - Integer overflow
CVE-2026-48933
CWE-190 Medium
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 10 more
#VU135015 - Improper input validation
CVE-2026-48618
CWE-20 High
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 11 more
#VU135017 - Improper Access Control
CVE-2026-48617
CWE-284 Low
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB2026092603
#VU135018 - Resource exhaustion
CVE-2026-48619
CWE-400 Medium
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135019 - Improper Resource Shutdown or Release
CVE-2026-48937
CWE-404 Medium
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260921174
and 3 more
#VU135020 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48928
CWE-297 Medium
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135021 - Improper Null Termination
CVE-2026-48930
CWE-170 Medium
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 10 more
#VU135022 - Improper Certificate Validation
CVE-2026-48934
CWE-295 Medium
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135023 - Improper Access Control
CVE-2026-48935
CWE-284 Low
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 8 more
#VU135025 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-48931
CWE-367 Medium
No
No
20.19.2+dfsg-1+deb13u3 22.06.2026 SB2026062248
SB20260728134
SB20260921174
and 3 more
#VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55131
CWE-362 Low
No
No
18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u1 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 20 more
#VU126388 - Uncaught Exception
CVE-2025-59465
CWE-248 Medium
No
No
18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u1 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 23 more
#VU126389 - Uncaught Exception
CVE-2025-59466
CWE-248 Medium
No
No
18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u1 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU109241 - Error Handling
CVE-2025-23166
CWE-388 Medium
No
No
18.20.4+dfsg-1~deb12u2 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 31 more
#VU103225 - Missing release of memory after effective lifetime
CVE-2025-23085
CWE-401 Medium
No
No
18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u1 22.01.2025 SB2025012252
SB2025012439
SB2025012440
and 30 more


Showing elements 1 - 20 out of 74