Known vulnerabilities in Node.js
Vendor:
Node.js Foundation
Software:
Node.js
Software CPE:
cpe:2.3:a:node_js_foundation:nodejs:*:*:*:*:*:*:*:*
Website:
https://nodejs.org
Total vulnerabilities:
182
Public exploits:
11
Known exploited (KEV):
2
Breakdown by Severity Chart
24.22.2
26.13.0
22.23.4
24.22.1
26.12.1
24.22.0
26.12.0
26.11.0
26.11.1
22.23.3
26.10.0
26.9.0
26.8.2
24.21.0
26.8.1
26.8.0
24.20.0
26.7.0
26.6.0
24.19.0
26.5.1
24.18.1
22.23.2
26.5.0
26.4.0
24.18.0
22.23.1
26.3.1
24.17.0
22.23.0
26.3.0
24.16.0
26.2.0
22.22.3
26.1.0
26.0.0
24.15.0
25.9.0
25.8.2
24.14.1
22.22.2
20.20.2
25.8.1
22.22.1
20.20.1
25.8.0
25.7.0
24.14.0
25.6.1
24.13.1
25.6.0
25.5.0
25.4.0
25.3.0
24.13.0
22.22.0
20.20.0
24.12.0
20.19.6
25.2.1
25.2.0
24.11.1
25.1.0
24.11.0
22.21.1
22.21.0
25.0.0
24.10.0
24.9.0
22.20.0
24.8.0
20.19.5
22.19.0
24.7.0
24.6.0
24.5.0
22.18.0
24.4.1
22.17.1
20.19.4
24.4.0
24.3.0
22.17.0
20.19.3
24.2.0
24.1.0
22.16.0
24.0.2
23.11.1
22.15.1
20.19.2
24.0.1
24.0.0
22.15.0
20.19.1
23.11.0
18.20.8
23.10.0
20.19.0
23.9.0
18.20.7
23.8.0
22.14.0
20.18.3
23.7.0
23.6.1
22.13.1
20.18.2
18.20.6
22.13.0
23.6.0
23.5.0
23.4.0
22.12.0
23.3.0
20.18.1
18.20.5
23.2.0
22.11.0
23.1.0
22.10.0
23.0.0
20.18.0
22.9.0
22.8.0
22.7.0
20.17.0
22.6.0
20.16.0
22.5.1
22.5.0
22.4.1
20.15.1
18.20.4
22.4.0
20.15.0
22.3.0
20.14.0
18.20.3
22.2.0
20.13.1
20.13.0
22.1.0
22.0.0
21.7.3
20.12.2
18.20.2
21.7.2
20.12.1
18.20.1
20.12.0
18.20.0
21.7.1
21.7.0
21.6.2
20.11.1
18.19.1
21.6.1
21.6.0
20.11.0
21.5.0
21.4.0
21.3.0
18.19.0
20.10.0
21.2.0
21.1.0
20.9.0
21.0.0
20.8.1
18.18.2
18.18.1
20.8.0
18.18.0
20.7.0
20.6.1
20.6.0
20.5.1
18.17.1
16.20.2
20.5.0
18.17.0
20.4.0
20.3.1
18.16.1
16.20.1
20.3.0
20.2.0
20.1.0
20.0.0
18.16.0
19.9.0
16.20.0
19.8.1
19.8.0
3.3.1
3.3.0
3.2.0
3.1.0
3.0.0
2.5.0
2.4.0
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.1
2.2.0
2.1.0
2.0.2
2.0.1
2.0.0
1.8.4
1.8.3
1.8.2
1.8.1
1.7.1
1.7.0
1.6.4
1.6.3
1.6.2
1.6.1
1.6.0
1.5.1
1.5.0
1.4.3
1.4.2
1.4.1
1.3.0
1.2.0
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
0.1.13
0.1.12
0.1.11
0.1.10
0.1.9
0.1.8
0.1.7
0.1.6
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
0.0.6
0.0.5
0.0.4
0.0.3
0.0.2
0.0.1
18.15.0
19.7.0
18.14.2
19.6.1
18.14.1
16.19.1
14.21.3
18.14.0
19.6.0
19.5.0
19.4.0
18.13.0
19.3.0
16.19.0
14.21.2
19.2.0
19.1.0
18.12.1
19.0.1
16.18.1
14.21.1
14.21.0
18.12.0
19.0.0
18.11.0
16.18.0
18.10.0
18.9.1
16.17.1
14.20.1
18.9.0
18.8.0
16.17.0
18.7.0
18.6.0
18.5.0
16.16.0
14.20.0
18.4.0
18.3.0
17.9.1
16.15.1
14.19.3
18.2.0
14.19.2
18.1.0
16.15.0
18.0.0
17.9.0
12.22.12
17.8.0
17.7.2
16.14.2
14.19.1
12.22.11
16.14.1
17.7.1
17.7.0
17.6.0
17.5.0
16.14.0
12.22.10
14.19.0
17.4.0
17.3.1
16.13.2
14.18.3
12.22.9
17.3.0
12.22.8
16.13.1
17.2.0
14.18.2
17.1.0
16.13.0
17.0.1
16.12.0
17.0.0
16.11.1
14.18.1
12.22.7
16.11.0
14.18.0
16.10.0
16.9.1
16.9.0
14.17.6
12.22.6
16.8.0
16.7.0
16.6.2
14.17.5
12.22.5
16.6.1
16.6.0
14.17.4
12.22.4
16.5.0
16.4.2
14.17.3
12.22.3
16.4.1
14.17.2
12.22.2
16.4.0
14.17.1
16.3.0
16.2.0
14.17.0
16.1.0
16.0.0
15.14.0
14.16.1
12.22.1
10.24.1
15.13.0
12.22.0
15.12.0
15.11.0
15.10.0
14.16.0
12.21.0
10.24.0
15.9.0
12.20.2
10.23.3
14.15.5
15.8.0
15.7.0
10.23.2
15.6.0
15.5.1
14.15.4
12.20.1
10.23.1
15.5.0
14.15.3
14.15.2
15.4.0
15.3.0
12.20.0
15.2.1
14.15.1
12.19.1
15.2.0
15.1.0
14.15.0
10.23.0
15.0.1
15.0.0
14.14.0
14.13.1
12.19.0
14.13.0
14.12.0
14.11.0
12.18.4
10.22.1
14.10.1
14.10.0
14.9.0
14.8.0
1.0.4
14.7.0
12.18.3
14.6.0
10.22.0
14.5.0
12.18.2
12.18.1
14.4.0
12.18.0
10.21.0
12.17.0
14.3.0
14.2.0
14.1.0
13.14.0
12.16.3
14.0.0
13.13.0
10.20.1
12.16.2
10.20.0
13.12.0
13.11.0
13.10.1
13.10.0
13.9.0
12.16.1
12.16.0
13.8.0
12.15.0
10.19.0
13.7.0
10.18.1
13.6.0
12.14.1
13.5.0
13.4.0
12.14.0
10.18.0
8.17.0
13.3.0
13.2.0
12.13.1
13.1.0
13.0.1
13.0.0
12.13.0
12.12.0
12.11.1
12.11.0
10.17.0
8.16.2
12.10.0
12.9.1
12.9.0
8.16.1
10.16.3
12.8.1
10.16.2
12.8.0
12.7.0
12.6.0
12.5.0
10.16.1
12.4.0
12.3.1
12.3.0
12.2.0
12.1.0
12.0.0
11.15.0
11.14.0
11.13.0
11.12.0
11.11.0
11.10.1
11.10.0
11.9.0
11.8.0
11.7.0
11.6.0
11.5.0
11.4.0
10.16.0
10.15.3
10.15.2
10.15.1
10.15.0
10.14.2
10.14.1
10.9.0
10.5.0
8.16.0
8.15.1
8.15.0
8.14.1
7.10.1
7.10.0
7.9.0
7.8.0
7.7.4
7.7.3
7.7.2
7.7.1
7.7.0
7.6.0
7.5.0
7.4.0
7.3.0
7.2.1
7.2.0
7.1.0
7.0.0
6.17.1
6.17.0
6.16.0
6.15.1
6.12.3
6.12.2
6.12.1
6.12.0
6.11.5
6.11.4
6.11.3
6.11.2
6.11.1
6.11.0
6.10.3
6.10.2
6.10.1
6.10.0
5.11.0
5.10.1
5.10.0
5.9.1
5.9.0
5.8.0
5.7.1
5.7.0
5.6.0
5.5.0
5.4.1
5.4.0
5.3.0
5.2.0
5.1.1
5.1.0
5.0.0
4.9.1
4.7.3
4.7.2
4.7.1
4.7.0
4.6.2
4.6.1
4.6.0
4.4.4
4.4.3
4.4.2
4.4.1
4.4.0
4.3.2
4.3.1
4.3.0
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2.0
4.1.2
4.1.1
4.1.0
4.0.0
0.12.18
0.12.17
0.12.16
0.12.15
0.12.14
0.12.13
0.12.12
0.12.11
0.12.10
0.12.9
0.12.8
0.12.7
0.12.6
0.12.5
0.12.4
0.12.3
0.12.2
0.12.1
0.12.0
0.11.16
0.11.15
0.11.14
0.11.13
0.11.12
0.11.11
0.11.10
0.11.9
0.11.8
0.11.7
0.11.6
0.11.5
0.11.4
0.11.3
0.11.2
0.11.1
0.11.0
0.10.48
0.10.47
0.10.46
0.10.45
0.10.44
0.10.43
0.10.42
0.10.41
0.10.40
0.10.39
0.10.38
0.10.37
0.10.36
0.10.35
0.10.34
0.10.33
0.10.31
0.10.30
0.10.29
0.10.28
0.10.27
0.10.26
0.10.25
0.10.24
0.10.23
0.10.22
0.10.21
0.10.20
0.10.19
0.10.18
0.10.17
0.10.16
0.10.15
0.10.14
0.10.13
0.10.12
0.10.11
0.10.10
0.10.9
0.10.8
0.10.7
0.10.6
0.10.5
0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.12
0.9.11
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.9.0
0.8.28
0.8.27
0.8.26
0.8.25
0.8.24
0.8.23
0.8.22
0.8.21
0.8.20
0.8.19
0.8.18
0.8.17
0.8.16
0.8.15
0.8.14
0.8.13
0.8.12
0.8.11
0.8.10
0.8.9
0.8.8
0.8.7
0.8.6
0.8.5
0.8.4
0.7.12
0.7.11
0.7.10
0.7.9
0.7.8
0.7.7
0.7.6
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.21
0.6.20
0.6.19
0.6.18
0.6.17
0.6.16
0.6.15
0.6.14
0.6.13
0.6.12
0.6.11
0.6.10
0.6.9
0.6.8
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.10
0.5.9
0.5.8
0.5.7
0.5.6
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.12
0.4.11
0.4.10
0.4.9
0.4.8
0.4.7
0.4.6
0.4.5
0.4.4
0.4.3
0.4.2
0.4.1
0.4.0
0.3.8
0.3.7
0.3.6
0.3.5
0.3.4
0.3.3
0.3.2
0.3.1
0.3.0
0.2.6
0.2.5
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
0.1.104
0.1.103
0.1.102
0.1.101
0.1.100
0.1.99
0.1.98
0.1.97
0.1.96
0.1.95
0.1.94
0.1.93
0.1.92
0.1.91
0.1.90
0.1.33
0.1.32
0.1.31
0.1.30
0.1.29
0.1.28
0.1.27
0.1.26
0.1.25
0.1.24
0.1.23
0.1.22
0.1.21
0.1.20
0.1.19
0.1.18
0.1.17
0.1.16
0.1.15
0.1.14
11.2.0
11.1.0
11.0.0
10.13.0
10.12.0
10.11.0
10.10.0
8.13.0
8.12.0
6.14.3
6.14.2
6.14.1
6.14.0
11.3.0
10.14.0
8.14.0
6.15.0
8.11.4
6.14.4
10.8.0
10.7.0
10.6.0
10.9
10.4.1
10.4.0
10.3.0
10.2.1
10.2.0
10.1.0
10.0.0
9.11.2
9.11.1
9.11.0
9.10.1
9.10.0
9.8.0
9.7.1
9.7.0
9.6.1
9.6.0
9.5.0
9.4.0
9.3.0
9.2.1
9.2.0
9.1.0
9.0.0
8.11.3
8.11.2
8.11.1
8.11.0
8.9.4
8.9.3
8.9.2
8.9.1
8.9.0
8.8.1
8.8.0
8.7.0
8.6.0
8.5.0
8.4.0
8.3.0
8.2.1
8.2.0
8.1.4
8.1.3
8.1.2
8.1.1
8.1.0
8.0.0
9.9.0
8.10.0
6.13.0
6.13.1
4.8.0
4.8.1
4.8.2
4.8.3
4.8.4
4.8.5
4.8.6
4.8.7
4.9.0
6.9.5
6.9.4
6.9.3
6.9.2
6.9.1
6.9.0
6.8.1
6.8.0
6.7.0
6.6.0
6.5.0
6.4.0
6.3.1
6.3.0
0.10.32
0.8.1
0.8.2
0.8.0
0.8.3
4.5.0
4.4.7
Node.js v0.10.45
Node.js v0.10.46
Node.js v0.12.14
Node.js v0.12.15
5.11.1
5.12.0
6.0.0
6.1.0
6.2.2
6.2.1
6.2.0
4.4.5
4.4.6
Vulnerabilities (182)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140038 - Resource exhaustion CVE-2026-56846 |
CWE-400 | Medium | 22.23.2, 24.18.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 11 more |
||
| #VU140039 - Use After Free CVE-2026-56848 |
CWE-416 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 11 more |
||
| #VU140040 - Improper Access Control CVE-2026-58043 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 10 more |
||
| #VU140041 - Authentication Bypass by Primary Weakness CVE-2026-56850 |
CWE-305 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 5 more |
||
| #VU140042 - Improper Certificate Validation CVE-2026-58040 |
CWE-295 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU140043 - Improper control of a resource through its lifetime CVE-2026-58041 |
CWE-664 | Low | 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 |
||
| #VU140044 - Improper input validation CVE-2026-58042 |
CWE-20 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU140045 - Improper input validation CVE-2026-58045 |
CWE-20 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU140046 - Improper Access Control CVE-2026-56847 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 2 more |
||
| #VU140047 - Improper Access Control CVE-2026-58039 |
CWE-284 | Low | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 2 more |
||
| #VU140048 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-58044 |
CWE-444 | Medium | 22.23.2, 24.18.1, 26.5.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU135014 - Integer overflow CVE-2026-48933 |
CWE-190 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 10 more |
||
| #VU135015 - Improper input validation CVE-2026-48618 |
CWE-20 | High | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 12 more |
||
| #VU135016 - Information Exposure Through Log Files CVE-2026-48615 |
CWE-532 | Low | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 6 more |
||
| #VU135017 - Improper Access Control CVE-2026-48617 |
CWE-284 | Low | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB2026092603 |
||
| #VU135018 - Resource exhaustion CVE-2026-48619 |
CWE-400 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 9 more |
||
| #VU135019 - Improper Resource Shutdown or Release CVE-2026-48937 |
CWE-404 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260921174 and 3 more |
||
| #VU135020 - Improper Validation of Certificate with Host Mismatch CVE-2026-48928 |
CWE-297 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 9 more |
||
| #VU135021 - Improper Null Termination CVE-2026-48930 |
CWE-170 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 11 more |
||
| #VU135022 - Improper Certificate Validation CVE-2026-48934 |
CWE-295 | Medium | 22.23.0, 24.17.0, 26.3.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 9 more |
Showing elements 1 - 20 out of 182