Known vulnerabilities in Node.js
Vendor:
Node.js Foundation
Software:
Node.js
Software CPE:
cpe:2.3:a:node_js_foundation:nodejs:*:*:*:*:*:*:*:*
Website:
https://nodejs.org
Total vulnerabilities:
172
Public exploits:
11
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
26.10.0
26.9.0
26.8.2
24.21.0
26.8.1
26.8.0
24.20.0
26.7.0
26.6.0
24.19.0
26.5.1
24.18.1
22.23.2
26.5.0
26.4.0
24.18.0
22.23.1
26.3.1
24.17.0
22.23.0
26.3.0
24.16.0
26.2.0
22.22.3
26.1.0
26.0.0
24.15.0
25.9.0
25.8.2
24.14.1
22.22.2
20.20.2
25.8.1
22.22.1
20.20.1
25.8.0
25.7.0
24.14.0
25.6.1
24.13.1
25.6.0
25.5.0
25.4.0
25.3.0
24.13.0
22.22.0
20.20.0
24.12.0
20.19.6
25.2.1
25.2.0
24.11.1
25.1.0
24.11.0
22.21.1
22.21.0
25.0.0
24.10.0
24.9.0
22.20.0
24.8.0
20.19.5
22.19.0
24.7.0
24.6.0
24.5.0
22.18.0
24.4.1
22.17.1
20.19.4
24.4.0
24.3.0
22.17.0
20.19.3
24.2.0
24.1.0
22.16.0
24.0.2
23.11.1
22.15.1
20.19.2
24.0.1
24.0.0
22.15.0
20.19.1
23.11.0
18.20.8
23.10.0
20.19.0
23.9.0
18.20.7
23.8.0
22.14.0
20.18.3
23.7.0
23.6.1
22.13.1
20.18.2
18.20.6
22.13.0
23.6.0
23.5.0
23.4.0
22.12.0
23.3.0
20.18.1
18.20.5
23.2.0
22.11.0
23.1.0
22.10.0
23.0.0
20.18.0
22.9.0
22.8.0
22.7.0
20.17.0
22.6.0
20.16.0
22.5.1
22.5.0
22.4.1
20.15.1
18.20.4
22.4.0
20.15.0
22.3.0
20.14.0
18.20.3
22.2.0
20.13.1
20.13.0
22.1.0
22.0.0
21.7.3
20.12.2
18.20.2
21.7.2
20.12.1
18.20.1
20.12.0
18.20.0
21.7.1
21.7.0
21.6.2
20.11.1
18.19.1
21.6.1
21.6.0
20.11.0
21.5.0
21.4.0
21.3.0
18.19.0
20.10.0
21.2.0
21.1.0
20.9.0
21.0.0
20.8.1
18.18.2
18.18.1
20.8.0
18.18.0
20.7.0
20.6.1
20.6.0
20.5.1
18.17.1
16.20.2
20.5.0
18.17.0
20.4.0
20.3.1
18.16.1
16.20.1
20.3.0
20.2.0
20.1.0
20.0.0
18.16.0
19.9.0
16.20.0
19.8.1
19.8.0
3.3.1
3.3.0
3.2.0
3.1.0
3.0.0
2.5.0
2.4.0
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.1
2.2.0
2.1.0
2.0.2
2.0.1
2.0.0
1.8.4
1.8.3
1.8.2
1.8.1
1.7.1
1.7.0
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.1
1.5.0
1.4.3
1.4.2
1.4.1
1.3.0
1.2.0
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
0.1.13
0.1.12
0.1.11
0.1.10
0.1.9
0.1.8
0.1.7
0.1.6
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
0.0.6
0.0.5
0.0.4
0.0.3
0.0.2
0.0.1
18.15.0
19.7.0
18.14.2
19.6.1
18.14.1
16.19.1
14.21.3
18.14.0
19.6.0
19.5.0
19.4.0
18.13.0
19.3.0
16.19.0
14.21.2
19.2.0
19.1.0
18.12.1
19.0.1
16.18.1
14.21.1
14.21.0
18.12.0
19.0.0
18.11.0
16.18.0
18.10.0
18.9.1
16.17.1
14.20.1
18.9.0
18.8.0
16.17.0
18.7.0
18.6.0
18.5.0
16.16.0
14.20.0
18.4.0
18.3.0
17.9.1
16.15.1
14.19.3
18.2.0
14.19.2
18.1.0
16.15.0
18.0.0
17.9.0
12.22.12
17.8.0
17.7.2
16.14.2
14.19.1
12.22.11
16.14.1
17.7.1
17.7.0
17.6.0
17.5.0
16.14.0
12.22.10
14.19.0
17.4.0
17.3.1
16.13.2
14.18.3
12.22.9
17.3.0
12.22.8
16.13.1
17.2.0
14.18.2
17.1.0
16.13.0
17.0.1
16.12.0
17.0.0
16.11.1
14.18.1
12.22.7
16.11.0
14.18.0
16.10.0
16.9.1
16.9.0
14.17.6
12.22.6
16.8.0
16.7.0
16.6.2
14.17.5
12.22.5
16.6.1
16.6.0
14.17.4
12.22.4
16.5.0
16.4.2
14.17.3
12.22.3
16.4.1
14.17.2
12.22.2
16.4.0
14.17.1
16.3.0
16.2.0
14.17.0
16.1.0
16.0.0
15.14.0
14.16.1
12.22.1
10.24.1
15.13.0
12.22.0
15.12.0
15.11.0
15.10.0
14.16.0
12.21.0
10.24.0
15.9.0
12.20.2
10.23.3
14.15.5
15.8.0
15.7.0
10.23.2
15.6.0
15.5.1
14.15.4
12.20.1
10.23.1
15.5.0
14.15.3
14.15.2
15.4.0
15.3.0
12.20.0
15.2.1
14.15.1
12.19.1
15.2.0
15.1.0
14.15.0
10.23.0
15.0.1
15.0.0
14.14.0
14.13.1
12.19.0
14.13.0
14.12.0
14.11.0
12.18.4
10.22.1
14.10.1
14.10.0
14.9.0
14.8.0
1.0.4
14.7.0
12.18.3
14.6.0
10.22.0
14.5.0
12.18.2
12.18.1
14.4.0
12.18.0
10.21.0
12.17.0
14.3.0
14.2.0
14.1.0
13.14.0
12.16.3
14.0.0
13.13.0
10.20.1
12.16.2
10.20.0
13.12.0
13.11.0
13.10.1
13.10.0
13.9.0
12.16.1
12.16.0
13.8.0
12.15.0
10.19.0
13.7.0
10.18.1
13.6.0
12.14.1
13.5.0
13.4.0
12.14.0
10.18.0
8.17.0
13.3.0
13.2.0
12.13.1
13.1.0
13.0.1
13.0.0
12.13.0
12.12.0
12.11.1
12.11.0
10.17.0
8.16.2
12.10.0
12.9.1
12.9.0
8.16.1
10.16.3
12.8.1
10.16.2
12.8.0
12.7.0
12.6.0
12.5.0
10.16.1
12.4.0
12.3.1
12.3.0
12.2.0
12.1.0
12.0.0
11.15.0
11.14.0
11.13.0
11.12.0
11.11.0
11.10.1
11.10.0
11.9.0
11.8.0
11.7.0
11.6.0
11.5.0
11.4.0
10.16.0
10.15.3
10.15.2
10.15.1
10.15.0
10.14.2
10.14.1
10.9.0
10.5.0
8.16.0
8.15.1
8.15.0
8.14.1
7.10.1
7.10.0
7.9.0
7.8.0
7.7.4
7.7.3
7.7.2
7.7.1
7.7.0
7.6.0
7.5.0
7.4.0
7.3.0
7.2.1
7.2.0
7.1.0
7.0.0
6.17.1
6.17.0
6.16.0
6.15.1
6.12.3
6.12.2
6.12.1
6.12.0
6.11.5
6.11.4
6.11.3
6.11.2
6.11.1
6.11.0
6.10.3
6.10.2
6.10.1
6.10.0
5.11.0
5.10.1
5.10.0
5.9.1
5.9.0
5.8.0
5.7.1
5.7.0
5.6.0
5.5.0
5.4.1
5.4.0
5.3.0
5.2.0
5.1.1
5.1.0
5.0.0
4.9.1
4.7.3
4.7.2
4.7.1
4.7.0
4.6.2
4.6.1
4.6.0
4.4.4
4.4.3
4.4.2
4.4.1
4.4.0
4.3.2
4.3.1
4.3.0
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.2
4.1.1
4.1.0
4.0.0
0.12.18
0.12.17
0.12.16
0.12.15
0.12.14
0.12.13
0.12.12
0.12.11
0.12.10
0.12.9
0.12.8
0.12.7
0.12.6
0.12.5
0.12.4
0.12.3
0.12.2
0.12.1
0.12.0
0.11.16
0.11.15
0.11.14
0.11.13
0.11.12
0.11.11
0.11.10
0.11.9
0.11.8
0.11.7
0.11.6
0.11.5
0.11.4
0.11.3
0.11.2
0.11.1
0.11.0
0.10.48
0.10.47
0.10.46
0.10.45
0.10.44
0.10.43
0.10.42
0.10.41
0.10.40
0.10.39
0.10.38
0.10.37
0.10.36
0.10.35
0.10.34
0.10.33
0.10.31
0.10.30
0.10.29
0.10.28
0.10.27
0.10.26
0.10.25
0.10.24
0.10.23
0.10.22
0.10.21
0.10.20
0.10.19
0.10.18
0.10.17
0.10.16
0.10.15
0.10.14
0.10.13
0.10.12
0.10.11
0.10.10
0.10.9
0.10.8
0.10.7
0.10.6
0.10.5
0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.12
0.9.11
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.28
0.8.27
0.8.26
0.8.25
0.8.24
0.8.23
0.8.22
0.8.21
0.8.20
0.8.19
0.8.18
0.8.17
0.8.16
0.8.15
0.8.14
0.8.13
0.8.12
0.8.11
0.8.10
0.8.9
0.8.8
0.8.7
0.8.6
0.8.5
0.8.4
0.7.12
0.7.11
0.7.10
0.7.9
0.7.8
0.7.7
0.7.6
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.21
0.6.20
0.6.19
0.6.18
0.6.17
0.6.16
0.6.15
0.6.14
0.6.13
0.6.12
0.6.11
0.6.10
0.6.9
0.6.8
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.10
0.5.9
0.5.8
0.5.7
0.5.6
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.12
0.4.11
0.4.10
0.4.9
0.4.8
0.4.7
0.4.6
0.4.5
0.4.4
0.4.3
0.4.2
0.4.1
0.4.0
0.3.8
0.3.7
0.3.6
0.3.5
0.3.4
0.3.3
0.3.2
0.3.1
0.3.0
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
0.1.104
0.1.103
0.1.102
0.1.101
0.1.100
0.1.99
0.1.98
0.1.97
0.1.96
0.1.95
0.1.94
0.1.93
0.1.92
0.1.91
0.1.90
0.1.33
0.1.32
0.1.31
0.1.30
0.1.29
0.1.28
0.1.27
0.1.26
0.1.25
0.1.24
0.1.23
0.1.22
0.1.21
0.1.20
0.1.19
0.1.18
0.1.17
0.1.16
0.1.15
0.1.14
11.2.0
11.1.0
11.0.0
10.13.0
10.12.0
10.11.0
10.10.0
8.13.0
8.12.0
6.14.3
6.14.2
6.14.1
6.14.0
11.3.0
10.14.0
8.14.0
6.15.0
8.11.4
6.14.4
10.8.0
10.7.0
10.6.0
10.9
10.4.1
10.4.0
10.3.0
10.2.1
10.2.0
10.1.0
10.0.0
9.11.2
9.11.1
9.11.0
9.10.1
9.10.0
9.8.0
9.7.1
9.7.0
9.6.1
9.6.0
9.5.0
9.4.0
9.3.0
9.2.1
9.2.0
9.1.0
9.0.0
8.11.3
8.11.2
8.11.1
8.11.0
8.9.4
8.9.3
8.9.2
8.9.1
8.9.0
8.8.1
8.8.0
8.7.0
8.6.0
8.5.0
8.4.0
8.3.0
8.2.1
8.2.0
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.0
9.9.0
8.10.0
6.13.0
6.13.1
4.8.0
4.8.1
4.8.2
4.8.3
4.8.4
4.8.5
4.8.6
4.8.7
4.9.0
6.9.5
6.9.4
6.9.3
6.9.2
6.9.1
6.9.0
6.8.1
6.8.0
6.7.0
6.6.0
6.5.0
6.4.0
6.3.1
6.3.0
0.10.32
0.8.1
0.8.2
0.8.0
0.8.3
4.5.0
4.4.7
Node.js v0.10.45
Node.js v0.10.46
Node.js v0.12.14
Node.js v0.12.15
5.11.1
5.12.0
6.0.0
6.1.0
6.2.2
6.2.1
6.2.0
4.4.5
4.4.6
Vulnerabilities (172)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140038 - Resource exhaustion CVE-2026-56846 |
CWE-400 | Medium | 22.23.2, 24.18.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 9 more |
||
| #VU140039 - Use After Free CVE-2026-56848 |
CWE-416 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 9 more |
||
| #VU140040 - Improper Access Control CVE-2026-58043 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 9 more |
||
| #VU140041 - Authentication Bypass by Primary Weakness CVE-2026-56850 |
CWE-305 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 3 more |
||
| #VU140042 - Improper Certificate Validation CVE-2026-58040 |
CWE-295 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 3 more |
||
| #VU140043 - Improper control of a resource through its lifetime CVE-2026-58041 |
CWE-664 | Low | 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 |
||
| #VU140044 - Improper input validation CVE-2026-58042 |
CWE-20 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 3 more |
||
| #VU140045 - Improper input validation CVE-2026-58045 |
CWE-20 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 3 more |
||
| #VU140046 - Improper Access Control CVE-2026-56847 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 1 more |
||
| #VU140047 - Improper Access Control CVE-2026-58039 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 1 more |
||
| #VU140048 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-58044 |
CWE-444 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 3 more |
||
| #VU135014 - Integer overflow CVE-2026-48933 |
CWE-190 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 8 more |
||
| #VU135015 - Improper input validation CVE-2026-48618 |
CWE-20 | High | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 8 more |
||
| #VU135016 - Information Exposure Through Log Files CVE-2026-48615 |
CWE-532 | Low | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 6 more |
||
| #VU135017 - Improper Access Control CVE-2026-48617 |
CWE-284 | Low | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135018 - Resource exhaustion CVE-2026-48619 |
CWE-400 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 7 more |
||
| #VU135019 - Improper Resource Shutdown or Release CVE-2026-48937 |
CWE-404 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260921174 and 1 more |
||
| #VU135020 - Improper Validation of Certificate with Host Mismatch CVE-2026-48928 |
CWE-297 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 7 more |
||
| #VU135021 - Improper Null Termination CVE-2026-48930 |
CWE-170 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 7 more |
||
| #VU135022 - Improper Certificate Validation CVE-2026-48934 |
CWE-295 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 7 more |
Showing elements 1 - 20 out of 172