Known vulnerabilities in Node.js - page 9

Software: Node.js
Software CPE: cpe:2.3:a:node_js_foundation:nodejs:*:*:*:*:*:*:*:*
Total vulnerabilities: 182
Public exploits: 11
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Node.js Node.js is affected by 182 known vulnerabilities: 12 high, 113 medium, 57 low Critical High Medium Low

Vulnerabilities (182)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU157675 - Improper Handling of Exceptional Conditions
CVE-2026-106070
CWE-755 Low
No
No
22.23.4, 24.22.1, 26.12.1 26.10.2026 SB2026102621
#VU157668 - Improper Neutralization of Null Byte or NUL Character
CVE-2026-105482
CWE-158 Medium
No
No
22.23.4, 24.22.1, 26.12.1 26.10.2026 SB2026102621
SB2026102726
SB2026110233
and 2 more
#VU157669 - Improper Validation of Certificate with Host Mismatch
CVE-2026-105483
CWE-297 Medium
No
No
22.23.4, 24.22.1, 26.12.1 26.10.2026 SB2026102621
SB2026102726
SB2026110459
#VU157670 - Improper Validation of Certificate with Host Mismatch
CVE-2026-106069
CWE-297 Medium
No
No
22.23.4, 24.22.1, 26.12.1 26.10.2026 SB2026102621
SB2026102726
SB2026110233
and 2 more
#VU157671 - Out-of-bounds write
CVE-2026-111497
CWE-787 High
No
Exploited
22.23.4, 24.22.1, 26.12.1 26.10.2026 SB2026102621
SB2026102622
SB2026102623
and 20 more
#VU157672 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-105481
CWE-362 Low
No
No
22.23.4, 24.22.1, 26.12.1 26.10.2026 SB2026102621
SB2026102726
SB2026110233
and 2 more
#VU157673 - Improper Validation of Certificate with Host Mismatch
CVE-2026-106072
CWE-297 Medium
No
No
22.23.4, 24.22.1, 26.12.1 26.10.2026 SB2026102621
SB2026102726
SB2026110233
and 2 more
#VU157674 - Use of Insufficiently Random Values
CVE-2026-106074
CWE-330 Medium
No
No
22.23.4, 24.22.1, 26.12.1 26.10.2026 SB2026102621
SB2026102726
SB2026110233
and 2 more
#VU16171 - Improper input validation
CVE-2018-12116
CWE-20 Low
No
No
6.15.0, 8.14.0, 11.3.0 29.11.2018 SB2018112906
SB2019012702
SB2019012803
and 5 more
#VU15723 - Information Exposure Through Timing Discrepancy
CVE-2018-5407
CWE-208 Low
Available
No
6.15.0, 8.14.0, 10.9 06.11.2018 SB2018110602
SB2018111301
SB2018112201
and 30 more
#VU15668 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0734
CWE-200 Low
No
No
10.14.0, 11.3.0 01.11.2018 SB2018110102
SB2018112201
SB2018112602
and 39 more
#VU15568 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0735
CWE-200 Low
No
No
6.15.0, 8.14.0, 10.14.0, 11.3.0 29.10.2018 SB2018110102
SB2018112602
SB2018112906
and 8 more
#VU14498 - Out-of-bounds write
CVE-2018-12115
CWE-787 Low
No
No
6.14.4, 8.11.4, 10.9 22.08.2018 SB2018082209
SB2018082313
SB2018082315
and 8 more
#VU14493 - Exposure of sensitive information to an unauthorized actor
CVE-2018-7166
CWE-200 Low
No
No
- 21.08.2018 SB2018082209
SB2019041743
#VU13379 - Improper input validation
CVE-2018-7167
CWE-20 Low
No
No
10.4.1 18.06.2018 SB2018061803
SB2018071402
SB2018071403
and 6 more
#VU13378 - Resource exhaustion
CVE-2018-7164
CWE-400 Low
No
No
10.4.1 18.06.2018 SB2018061803
SB2020032103
#VU13377 - Improper input validation
CVE-2018-7162
CWE-20 Low
No
No
10.4.1 18.06.2018 SB2018061803
SB2020032103
SB2018061524
and 2 more
#VU13376 - Improper input validation
CVE-2018-7161
CWE-20 Low
No
No
10.4.1 16.06.2018 SB2018061803
SB2018071402
SB2020032103
and 4 more
#VU12575 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-7159
CWE-113 Low
No
No
- 10.05.2018 SB2018051406
SB2019080616
SB2020042404
and 8 more
#VU12573 - Resource exhaustion
CVE-2018-7158
CWE-400 Medium
No
No
- 10.05.2018 SB2018051406
SB2018033043
SB2018032834
and 6 more


Showing elements 161 - 180 out of 182