Known vulnerabilities in nodejs22

Vendor: Fedoraproject
Software: nodejs22
Software CPE: cpe:2.3:o:fedoraproject:nodejs22:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs22 nodejs22 is affected by 30 known vulnerabilities: 2 high, 17 medium, 11 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-42338		 CWE-79 Medium
No
No
 22.23.1-2.fc44 31.08.2026 SB20260831109
SB20260831117
SB20260831118
and 7 more
#VU135014 - Integer overflow
CVE-2026-48933		 CWE-190 Medium
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 6 more
#VU135015 - Improper input validation
CVE-2026-48618		 CWE-20 High
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 6 more
#VU135016 - Information Exposure Through Log Files
CVE-2026-48615		 CWE-532 Low
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 6 more
#VU135018 - Resource exhaustion
CVE-2026-48619		 CWE-400 Medium
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 5 more
#VU135020 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48928		 CWE-297 Medium
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 5 more
#VU135021 - Improper Null Termination
CVE-2026-48930		 CWE-170 Medium
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 5 more
#VU135022 - Improper Certificate Validation
CVE-2026-48934		 CWE-295 Medium
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 5 more
#VU135023 - Improper Access Control
CVE-2026-48935		 CWE-284 Low
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 5 more
#VU135024 - Improper Access Control
CVE-2026-48936		 CWE-284 Low
No
No
 22.23.1-2.fc44 22.06.2026 SB2026062248
SB20260831117
SB20260831118
#VU134758 - Origin Validation Error
CVE-2026-6734		 CWE-346 Low
No
No
 22.23.1-2.fc44 17.06.2026 SB2026061761
SB2026082715
SB20260831117
and 3 more
#VU134756 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-9679		 CWE-93 Medium
No
No
 22.23.1-2.fc44 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 2 more
#VU134753 - Allocation of Resources Without Limits or Throttling
CVE-2026-12151		 CWE-770 Medium
No
No
 22.23.1-2.fc44 17.06.2026 SB2026061760
SB20260720393
SB2026080430
and 10 more
#VU134752 - Permissive List of Allowed Inputs
CVE-2026-11525		 CWE-183 Low
No
No
 22.23.1-2.fc44 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 6 more
#VU134751 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-6733		 CWE-367 Low
No
No
 22.23.1-2.fc44 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 6 more
#VU124546 - Missing release of memory after effective lifetime
CVE-2026-21714		 CWE-401 Medium
No
No
 22.22.2-2.fc43, 22.22.2-3.fc42, 22.22.2-3.fc44 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 20 more
#VU124548 - Improper Access Control
CVE-2026-21715		 CWE-284 Low
No
No
 22.22.2-2.fc43, 22.22.2-3.fc42, 22.22.2-3.fc44 25.03.2026 SB20260325154
SB2026032902
SB2026041564
and 18 more
#VU124549 - Improper Access Control
CVE-2026-21716		 CWE-284 Low
No
No
 22.22.2-2.fc43, 22.22.2-3.fc42, 22.22.2-3.fc44 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 18 more
#VU124542 - Error Handling
CVE-2026-21710		 CWE-388 Medium
No
No
 22.22.2-2.fc43, 22.22.2-3.fc42, 22.22.2-3.fc44 25.03.2026 SB20260325154
SB2026032902
SB2026041056
and 29 more
#VU124545 - Information Exposure Through Timing Discrepancy
CVE-2026-21713		 CWE-208 Medium
No
No
 22.22.2-2.fc43, 22.22.2-3.fc42, 22.22.2-3.fc44 25.03.2026 SB20260325154
SB2026032902
SB2026041543
and 19 more


Showing elements 1 - 20 out of 30