Known vulnerabilities in nodejs (Debian package) - page 2

Vendor: Debian
Software CPE: cpe:2.3:o:debian:nodejs_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 74
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs (Debian package) nodejs (Debian package) is affected by 74 known vulnerabilities: 3 high, 58 medium, 13 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126387 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-55130
CWE-59 Low
No
No
20.19.2+dfsg-1+deb13u1 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU126392 - Improper Access Control
CVE-2025-55132
CWE-284 Low
No
No
20.19.2+dfsg-1+deb13u1 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 13 more
#VU124546 - Missing release of memory after effective lifetime
CVE-2026-21714
CWE-401 Medium
No
No
18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u2 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 23 more
#VU124547 - Creation of chroot Jail Without Changing Working Directory
CVE-2026-21717
CWE-243 Medium
No
No
20.19.2+dfsg-1+deb13u2 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 19 more
#VU124548 - Improper Access Control
CVE-2026-21715
CWE-284 Low
No
No
20.19.2+dfsg-1+deb13u2 25.03.2026 SB20260325154
SB2026032902
SB2026041564
and 18 more
#VU124549 - Improper Access Control
CVE-2026-21716
CWE-284 Low
No
No
20.19.2+dfsg-1+deb13u2 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 18 more
#VU124541 - DEPRECATED: Often Misused: Path Manipulation
CVE-2026-21637
CWE-249 High
No
No
20.19.2+dfsg-1+deb13u1, 20.19.2+dfsg-1+deb13u2 25.03.2026 SB2026032902
SB20260415182
SB20260415187
and 29 more
#VU124542 - Error Handling
CVE-2026-21710
CWE-388 Medium
No
No
18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u2 25.03.2026 SB20260325154
SB2026032902
SB2026041056
and 33 more
#VU124545 - Information Exposure Through Timing Discrepancy
CVE-2026-21713
CWE-208 Medium
No
No
18.20.4+dfsg-1~deb12u2, 20.19.2+dfsg-1+deb13u2 25.03.2026 SB20260325154
SB2026032902
SB2026041543
and 22 more
#VU114773 - Out-of-bounds read
CVE-2025-47153
CWE-125 Medium
No
No
18.20.4+dfsg-1~deb12u1 03.09.2025 SB2025090382
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020
CWE-918 Medium
No
No
18.20.4+dfsg-1~deb12u1 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 30 more
#VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-27982
CWE-444 Medium
No
No
18.20.4+dfsg-1~deb12u1 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 53 more
#VU88175 - Reachable Assertion
CVE-2024-27983
CWE-617 Medium
Available
No
18.20.4+dfsg-1~deb12u1 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU86733 - Improper input validation
CVE-2024-22025
CWE-20 Medium
No
No
18.20.4+dfsg-1~deb12u1 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 34 more
#VU86724 - Covert Timing Channel
CVE-2023-46809
CWE-385 Medium
No
No
18.20.4+dfsg-1~deb12u1 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 35 more
#VU86721 - Improper input validation
CVE-2024-22019
CWE-20 Medium
No
No
18.20.4+dfsg-1~deb12u1 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 48 more
#VU86718 - Improper Handling of Exceptional Conditions
CVE-2024-21892
CWE-755 Low
No
No
18.20.4+dfsg-1~deb12u1 22.02.2024 SB2024022225
SB2024022226
SB2024022832
and 30 more
#VU82070 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39333
CWE-94 Low
No
No
18.19.0+dfsg-6~deb12u1 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 28 more
#VU82069 - Improper Validation of Integrity Check Value
CVE-2023-38552
CWE-354 Medium
No
No
18.19.0+dfsg-6~deb12u1 17.10.2023 SB2023101703
SB2023101801
SB2023101802
and 34 more
#VU77586 - Permissions, Privileges, and Access Controls
CVE-2023-30581
CWE-264 Medium
No
No
18.19.0+dfsg-6~deb12u1 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 31 more


Showing elements 21 - 40 out of 74