Known vulnerabilities in Node.js - page 7

Software: Node.js
Software CPE: cpe:2.3:a:node_js_foundation:nodejs:*:*:*:*:*:*:*:*
Total vulnerabilities: 172
Public exploits: 11
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Node.js Node.js is affected by 172 known vulnerabilities: 11 high, 108 medium, 53 low Critical High Medium Low

Vulnerabilities (172)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61254 - Use After Free
CVE-2021-22940
CWE-416 Medium
No
No
12.22.5, 14.17.5, 16.6.1 11.03.2022 SB2021081615
SB2022031104
SB2022060618
and 23 more
#VU61253 - Improper Certificate Validation
CVE-2021-22939
CWE-295 Medium
No
No
12.22.5, 14.17.5, 16.6.2 11.03.2022 SB2021081614
SB2022031104
SB2022060618
and 25 more
#VU55560 - Use After Free
CVE-2021-22930
CWE-416 High
No
No
12.22.4, 14.17.4, 16.6.0 03.08.2021 SB2021080320
SB2021080324
SB2021080325
and 35 more
#VU54624 - Out-of-bounds read
CVE-2021-22918
CWE-125 Medium
No
No
12.22.2, 14.17.2, 16.4.1 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more
#VU50955 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-22884
CWE-350 Medium
No
No
10.24.0, 12.21.0, 14.16.0, 15.10.0 25.02.2021 SB2021022530
SB2021022532
SB2021022616
and 38 more
#VU50954 - Resource Management Errors
CVE-2021-22883
CWE-399 Medium
No
No
10.24.0, 12.21.0, 14.16.0, 15.10.0 25.02.2021 SB2021022530
SB2021022532
SB2021022614
and 36 more
#VU50745 - Improper input validation
CVE-2021-23840
CWE-20 Medium
No
No
10.24.0, 12.21.0, 14.16.0, 15.10.0 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU49254 - Use After Free
CVE-2020-8265
CWE-416 Medium
No
No
10.23.1, 12.20.1, 14.15.4, 15.5.1 04.01.2021 SB2021010419
SB2021010704
SB2021010705
and 33 more
#VU49253 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-8287
CWE-444 Medium
Available
No
10.23.1, 12.20.1, 14.15.4, 15.5.1 04.01.2021 SB2021010419
SB2021010706
SB2021010707
and 33 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971
CWE-476 Medium
Available
No
10.23.1, 12.20.1, 14.15.4 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU48569 - Resource Management Errors
CVE-2020-8277
CWE-399 Medium
Available
No
12.19.1, 14.15.1, 15.2.1 19.11.2020 SB2020112003
SB2020112005
SB2020102133
and 23 more
#VU47248 - Buffer overflow
CVE-2020-8252
CWE-120 High
No
No
10.22.1, 12.18.4, 14.9.0 18.09.2020 SB2020100117
SB2020091824
SB2020091825
and 19 more
#VU28539 - Memory corruption
CVE-2020-8174
CWE-119 High
No
No
10.21.0, 12.18.0, 14.4.0 03.06.2020 SB2020060305
SB2020060607
SB2020072216
and 20 more
#VU28538 - Resource exhaustion
CVE-2020-11080
CWE-400 Medium
No
No
10.21.0, 12.18.0, 14.4.0 03.06.2020 SB2020060305
SB2020060607
SB2020060703
and 42 more
#VU28537 - Improper Authorization
CVE-2020-8172
CWE-285 Medium
No
No
12.18.0, 14.4.0 03.06.2020 SB2020060305
SB2020060364
SB2020060365
and 9 more
#VU26284 - Resource exhaustion
CVE-2019-5737
CWE-400 Medium
No
No
6.17.0, 8.15.1, 10.15.2, 11.10.1 20.03.2020 SB2019032825
SB2020032103
SB2019041610
and 6 more
#VU26149 - Integer overflow
CVE-2020-10531
CWE-190 High
No
No
10.21.0 17.03.2020 SB2020031801
SB2020031802
SB2020031803
and 40 more
#VU25014 - Reachable Assertion
CVE-2019-15604
CWE-617 Medium
No
No
10.19.0, 12.15.0, 13.8.0 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 10 more
#VU25013 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-15605
CWE-444 Medium
No
No
10.19.0, 12.15.0, 13.8.0 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 19 more
#VU25012 - Improper input validation
CVE-2019-15606
CWE-20 Medium
No
No
10.19.0, 12.15.0, 13.8.0 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 11 more


Showing elements 121 - 140 out of 172