Known vulnerabilities in nodejs24

Vendor: Fedoraproject
Software: nodejs24
Software CPE: cpe:2.3:o:fedoraproject:nodejs24:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs24 nodejs24 is affected by 17 known vulnerabilities: 1 high, 10 medium, 6 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-42338		 CWE-79 Medium
No
No
 24.18.0-1.fc44 31.08.2026 SB20260831109
SB20260831117
SB20260831118
and 8 more
#VU135014 - Integer overflow
CVE-2026-48933		 CWE-190 Medium
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 10 more
#VU135015 - Improper input validation
CVE-2026-48618		 CWE-20 High
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 11 more
#VU135016 - Information Exposure Through Log Files
CVE-2026-48615		 CWE-532 Low
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 6 more
#VU135018 - Resource exhaustion
CVE-2026-48619		 CWE-400 Medium
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135020 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48928		 CWE-297 Medium
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135021 - Improper Null Termination
CVE-2026-48930		 CWE-170 Medium
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 10 more
#VU135022 - Improper Certificate Validation
CVE-2026-48934		 CWE-295 Medium
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135023 - Improper Access Control
CVE-2026-48935		 CWE-284 Low
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 8 more
#VU135024 - Improper Access Control
CVE-2026-48936		 CWE-284 Low
No
No
 24.18.0-1.fc44 22.06.2026 SB2026062248
SB20260831117
SB20260831118
#VU134758 - Origin Validation Error
CVE-2026-6734		 CWE-346 Low
No
No
 24.18.0-1.fc44 17.06.2026 SB2026061761
SB2026082715
SB20260831117
and 3 more
#VU134756 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-9679		 CWE-93 Medium
No
No
 24.18.0-1.fc44 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 4 more
#VU134755 - Use of Cache Containing Sensitive Information
CVE-2026-9678		 CWE-524 Medium
No
No
 24.18.0-1.fc44 17.06.2026 SB2026061760
SB2026082715
SB20260831117
and 7 more
#VU134754 - Improper Certificate Validation
CVE-2026-9697		 CWE-295 Medium
No
No
 24.18.0-1.fc44 17.06.2026 SB2026061760
SB20260720393
SB2026082715
and 3 more
#VU134753 - Allocation of Resources Without Limits or Throttling
CVE-2026-12151		 CWE-770 Medium
No
No
 24.18.0-1.fc44 17.06.2026 SB2026061760
SB20260720393
SB2026080430
and 13 more
#VU134752 - Permissive List of Allowed Inputs
CVE-2026-11525		 CWE-183 Low
No
No
 24.18.0-1.fc44 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 9 more
#VU134751 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-6733		 CWE-367 Low
No
No
 24.18.0-1.fc44 17.06.2026 SB2026061760
SB2026080430
SB2026082715
and 9 more