Known vulnerabilities in Node.js
Vendor:
Node.js Foundation
Software:
Node.js
Software CPE:
cpe:2.3:a:node_js_foundation:nodejs:*:*:*:*:*:*:*:*
Website:
https://nodejs.org
Total vulnerabilities:
172
Public exploits:
11
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
26.7.0
26.6.0
24.19.0
26.5.1
24.18.1
22.23.2
26.5.0
26.4.0
24.18.0
22.23.1
26.3.1
24.17.0
22.23.0
26.3.0
24.16.0
26.2.0
22.22.3
26.1.0
26.0.0
24.15.0
25.9.0
25.8.2
24.14.1
22.22.2
20.20.2
25.8.1
22.22.1
20.20.1
25.8.0
25.7.0
24.14.0
25.6.1
24.13.1
25.6.0
25.5.0
25.4.0
25.3.0
24.13.0
22.22.0
20.20.0
24.12.0
20.19.6
25.2.1
25.2.0
24.11.1
25.1.0
24.11.0
22.21.1
22.21.0
25.0.0
24.10.0
24.9.0
22.20.0
24.8.0
20.19.5
22.19.0
24.7.0
24.6.0
24.5.0
22.18.0
24.4.1
22.17.1
20.19.4
24.4.0
24.3.0
22.17.0
20.19.3
24.2.0
24.1.0
22.16.0
24.0.2
23.11.1
22.15.1
20.19.2
24.0.1
24.0.0
22.15.0
20.19.1
23.11.0
18.20.8
23.10.0
20.19.0
23.9.0
18.20.7
23.8.0
22.14.0
20.18.3
23.7.0
23.6.1
22.13.1
20.18.2
18.20.6
22.13.0
23.6.0
23.5.0
23.4.0
22.12.0
23.3.0
20.18.1
18.20.5
23.2.0
22.11.0
23.1.0
22.10.0
23.0.0
20.18.0
22.9.0
22.8.0
22.7.0
20.17.0
22.6.0
20.16.0
22.5.1
22.5.0
22.4.1
20.15.1
18.20.4
22.4.0
20.15.0
22.3.0
20.14.0
18.20.3
22.2.0
20.13.1
20.13.0
22.1.0
22.0.0
21.7.3
20.12.2
18.20.2
21.7.2
20.12.1
18.20.1
20.12.0
18.20.0
21.7.1
21.7.0
21.6.2
20.11.1
18.19.1
21.6.1
21.6.0
20.11.0
21.5.0
21.4.0
21.3.0
18.19.0
20.10.0
21.2.0
21.1.0
20.9.0
21.0.0
20.8.1
18.18.2
18.18.1
20.8.0
18.18.0
20.7.0
20.6.1
20.6.0
20.5.1
18.17.1
16.20.2
20.5.0
18.17.0
20.4.0
20.3.1
18.16.1
16.20.1
20.3.0
20.2.0
20.1.0
20.0.0
18.16.0
19.9.0
16.20.0
19.8.1
19.8.0
3.3.1
3.3.0
3.2.0
3.1.0
3.0.0
2.5.0
2.4.0
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.1
2.2.0
2.1.0
2.0.2
2.0.1
2.0.0
1.8.4
1.8.3
1.8.2
1.8.1
1.7.1
1.7.0
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.1
1.5.0
1.4.3
1.4.2
1.4.1
1.3.0
1.2.0
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
0.1.13
0.1.12
0.1.11
0.1.10
0.1.9
0.1.8
0.1.7
0.1.6
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
0.0.6
0.0.5
0.0.4
0.0.3
0.0.2
0.0.1
18.15.0
19.7.0
18.14.2
19.6.1
18.14.1
16.19.1
14.21.3
18.14.0
19.6.0
19.5.0
19.4.0
18.13.0
19.3.0
16.19.0
14.21.2
19.2.0
19.1.0
18.12.1
19.0.1
16.18.1
14.21.1
14.21.0
18.12.0
19.0.0
18.11.0
16.18.0
18.10.0
18.9.1
16.17.1
14.20.1
18.9.0
18.8.0
16.17.0
18.7.0
18.6.0
18.5.0
16.16.0
14.20.0
18.4.0
18.3.0
17.9.1
16.15.1
14.19.3
18.2.0
14.19.2
18.1.0
16.15.0
18.0.0
17.9.0
12.22.12
17.8.0
17.7.2
16.14.2
14.19.1
12.22.11
16.14.1
17.7.1
17.7.0
17.6.0
17.5.0
16.14.0
12.22.10
14.19.0
17.4.0
17.3.1
16.13.2
14.18.3
12.22.9
17.3.0
12.22.8
16.13.1
17.2.0
14.18.2
17.1.0
16.13.0
17.0.1
16.12.0
17.0.0
16.11.1
14.18.1
12.22.7
16.11.0
14.18.0
16.10.0
16.9.1
16.9.0
14.17.6
12.22.6
16.8.0
16.7.0
16.6.2
14.17.5
12.22.5
16.6.1
16.6.0
14.17.4
12.22.4
16.5.0
16.4.2
14.17.3
12.22.3
16.4.1
14.17.2
12.22.2
16.4.0
14.17.1
16.3.0
16.2.0
14.17.0
16.1.0
16.0.0
15.14.0
14.16.1
12.22.1
10.24.1
15.13.0
12.22.0
15.12.0
15.11.0
15.10.0
14.16.0
12.21.0
10.24.0
15.9.0
12.20.2
10.23.3
14.15.5
15.8.0
15.7.0
10.23.2
15.6.0
15.5.1
14.15.4
12.20.1
10.23.1
15.5.0
14.15.3
14.15.2
15.4.0
15.3.0
12.20.0
15.2.1
14.15.1
12.19.1
15.2.0
15.1.0
14.15.0
10.23.0
15.0.1
15.0.0
14.14.0
14.13.1
12.19.0
14.13.0
14.12.0
14.11.0
12.18.4
10.22.1
14.10.1
14.10.0
14.9.0
14.8.0
1.0.4
14.7.0
12.18.3
14.6.0
10.22.0
14.5.0
12.18.2
12.18.1
14.4.0
12.18.0
10.21.0
12.17.0
14.3.0
14.2.0
14.1.0
13.14.0
12.16.3
14.0.0
13.13.0
10.20.1
12.16.2
10.20.0
13.12.0
13.11.0
13.10.1
13.10.0
13.9.0
12.16.1
12.16.0
13.8.0
12.15.0
10.19.0
13.7.0
10.18.1
13.6.0
12.14.1
13.5.0
13.4.0
12.14.0
10.18.0
8.17.0
13.3.0
13.2.0
12.13.1
13.1.0
13.0.1
13.0.0
12.13.0
12.12.0
12.11.1
12.11.0
10.17.0
8.16.2
12.10.0
12.9.1
12.9.0
8.16.1
10.16.3
12.8.1
10.16.2
12.8.0
12.7.0
12.6.0
12.5.0
10.16.1
12.4.0
12.3.1
12.3.0
12.2.0
12.1.0
12.0.0
11.15.0
11.14.0
11.13.0
11.12.0
11.11.0
11.10.1
11.10.0
11.9.0
11.8.0
11.7.0
11.6.0
11.5.0
11.4.0
10.16.0
10.15.3
10.15.2
10.15.1
10.15.0
10.14.2
10.14.1
10.9.0
10.5.0
8.16.0
8.15.1
8.15.0
8.14.1
7.10.1
7.10.0
7.9.0
7.8.0
7.7.4
7.7.3
7.7.2
7.7.1
7.7.0
7.6.0
7.5.0
7.4.0
7.3.0
7.2.1
7.2.0
7.1.0
7.0.0
6.17.1
6.17.0
6.16.0
6.15.1
6.12.3
6.12.2
6.12.1
6.12.0
6.11.5
6.11.4
6.11.3
6.11.2
6.11.1
6.11.0
6.10.3
6.10.2
6.10.1
6.10.0
5.11.0
5.10.1
5.10.0
5.9.1
5.9.0
5.8.0
5.7.1
5.7.0
5.6.0
5.5.0
5.4.1
5.4.0
5.3.0
5.2.0
5.1.1
5.1.0
5.0.0
4.9.1
4.7.3
4.7.2
4.7.1
4.7.0
4.6.2
4.6.1
4.6.0
4.4.4
4.4.3
4.4.2
4.4.1
4.4.0
4.3.2
4.3.1
4.3.0
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.2
4.1.1
4.1.0
4.0.0
0.12.18
0.12.17
0.12.16
0.12.15
0.12.14
0.12.13
0.12.12
0.12.11
0.12.10
0.12.9
0.12.8
0.12.7
0.12.6
0.12.5
0.12.4
0.12.3
0.12.2
0.12.1
0.12.0
0.11.16
0.11.15
0.11.14
0.11.13
0.11.12
0.11.11
0.11.10
0.11.9
0.11.8
0.11.7
0.11.6
0.11.5
0.11.4
0.11.3
0.11.2
0.11.1
0.11.0
0.10.48
0.10.47
0.10.46
0.10.45
0.10.44
0.10.43
0.10.42
0.10.41
0.10.40
0.10.39
0.10.38
0.10.37
0.10.36
0.10.35
0.10.34
0.10.33
0.10.31
0.10.30
0.10.29
0.10.28
0.10.27
0.10.26
0.10.25
0.10.24
0.10.23
0.10.22
0.10.21
0.10.20
0.10.19
0.10.18
0.10.17
0.10.16
0.10.15
0.10.14
0.10.13
0.10.12
0.10.11
0.10.10
0.10.9
0.10.8
0.10.7
0.10.6
0.10.5
0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.12
0.9.11
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.28
0.8.27
0.8.26
0.8.25
0.8.24
0.8.23
0.8.22
0.8.21
0.8.20
0.8.19
0.8.18
0.8.17
0.8.16
0.8.15
0.8.14
0.8.13
0.8.12
0.8.11
0.8.10
0.8.9
0.8.8
0.8.7
0.8.6
0.8.5
0.8.4
0.7.12
0.7.11
0.7.10
0.7.9
0.7.8
0.7.7
0.7.6
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.21
0.6.20
0.6.19
0.6.18
0.6.17
0.6.16
0.6.15
0.6.14
0.6.13
0.6.12
0.6.11
0.6.10
0.6.9
0.6.8
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.10
0.5.9
0.5.8
0.5.7
0.5.6
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.12
0.4.11
0.4.10
0.4.9
0.4.8
0.4.7
0.4.6
0.4.5
0.4.4
0.4.3
0.4.2
0.4.1
0.4.0
0.3.8
0.3.7
0.3.6
0.3.5
0.3.4
0.3.3
0.3.2
0.3.1
0.3.0
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
0.1.104
0.1.103
0.1.102
0.1.101
0.1.100
0.1.99
0.1.98
0.1.97
0.1.96
0.1.95
0.1.94
0.1.93
0.1.92
0.1.91
0.1.90
0.1.33
0.1.32
0.1.31
0.1.30
0.1.29
0.1.28
0.1.27
0.1.26
0.1.25
0.1.24
0.1.23
0.1.22
0.1.21
0.1.20
0.1.19
0.1.18
0.1.17
0.1.16
0.1.15
0.1.14
11.2.0
11.1.0
11.0.0
10.13.0
10.12.0
10.11.0
10.10.0
8.13.0
8.12.0
6.14.3
6.14.2
6.14.1
6.14.0
11.3.0
10.14.0
8.14.0
6.15.0
8.11.4
6.14.4
10.8.0
10.7.0
10.6.0
10.9
10.4.1
10.4.0
10.3.0
10.2.1
10.2.0
10.1.0
10.0.0
9.11.2
9.11.1
9.11.0
9.10.1
9.10.0
9.8.0
9.7.1
9.7.0
9.6.1
9.6.0
9.5.0
9.4.0
9.3.0
9.2.1
9.2.0
9.1.0
9.0.0
8.11.3
8.11.2
8.11.1
8.11.0
8.9.4
8.9.3
8.9.2
8.9.1
8.9.0
8.8.1
8.8.0
8.7.0
8.6.0
8.5.0
8.4.0
8.3.0
8.2.1
8.2.0
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.0
9.9.0
8.10.0
6.13.0
6.13.1
4.8.0
4.8.1
4.8.2
4.8.3
4.8.4
4.8.5
4.8.6
4.8.7
4.9.0
6.9.5
6.9.4
6.9.3
6.9.2
6.9.1
6.9.0
6.8.1
6.8.0
6.7.0
6.6.0
6.5.0
6.4.0
6.3.1
6.3.0
0.10.32
0.8.1
0.8.2
0.8.0
0.8.3
4.5.0
4.4.7
Node.js v0.10.45
Node.js v0.10.46
Node.js v0.12.14
Node.js v0.12.15
5.11.1
5.12.0
6.0.0
6.1.0
6.2.2
6.2.1
6.2.0
4.4.5
4.4.6
Vulnerabilities (172)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140038 - Resource exhaustion CVE-2026-56846 |
CWE-400 | Medium | 22.23.2, 24.18.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140039 - Use After Free CVE-2026-56848 |
CWE-416 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140040 - Improper Access Control CVE-2026-58043 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140041 - Authentication Bypass by Primary Weakness CVE-2026-56850 |
CWE-305 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140042 - Improper Certificate Validation CVE-2026-58040 |
CWE-295 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140043 - Improper control of a resource through its lifetime CVE-2026-58041 |
CWE-664 | Low | 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140044 - Improper input validation CVE-2026-58042 |
CWE-20 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140045 - Improper input validation CVE-2026-58045 |
CWE-20 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140046 - Improper Access Control CVE-2026-56847 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140047 - Improper Access Control CVE-2026-58039 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU140048 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-58044 |
CWE-444 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 |
||
| #VU135014 - Integer overflow CVE-2026-48933 |
CWE-190 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135015 - Improper input validation CVE-2026-48618 |
CWE-20 | High | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135016 - Information Exposure Through Log Files CVE-2026-48615 |
CWE-532 | Low | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135017 - Improper Access Control CVE-2026-48617 |
CWE-284 | Low | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135018 - Resource exhaustion CVE-2026-48619 |
CWE-400 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135019 - Improper Resource Shutdown or Release CVE-2026-48937 |
CWE-404 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135020 - Improper Validation of Certificate with Host Mismatch CVE-2026-48928 |
CWE-297 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135021 - Improper Null Termination CVE-2026-48930 |
CWE-170 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
||
| #VU135022 - Improper Certificate Validation CVE-2026-48934 |
CWE-295 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 |
Showing elements 1 - 20 out of 172