Known vulnerabilities in nodejs

Vendor: OpenAnolis
Software: nodejs
Software CPE: cpe:2.3:o:openanolis:nodejs:*:*:*:*:*:anolis_os:*:*
Total vulnerabilities: 116
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs nodejs is affected by 116 known vulnerabilities: 8 high, 84 medium, 24 low Critical High Medium Low

Vulnerabilities (116)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140038 - Resource exhaustion
CVE-2026-56846
CWE-400 Medium
No
No
22.23.2-1 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 11 more
#VU140039 - Use After Free
CVE-2026-56848
CWE-416 Medium
No
No
22.23.2-1 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 11 more
#VU140040 - Improper Access Control
CVE-2026-58043
CWE-284 Low
No
No
22.23.2-1 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 9 more
#VU135014 - Integer overflow
CVE-2026-48933
CWE-190 Medium
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 10 more
#VU135015 - Improper input validation
CVE-2026-48618
CWE-20 High
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 11 more
#VU135016 - Information Exposure Through Log Files
CVE-2026-48615
CWE-532 Low
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 6 more
#VU135017 - Improper Access Control
CVE-2026-48617
CWE-284 Low
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB2026092603
#VU135018 - Resource exhaustion
CVE-2026-48619
CWE-400 Medium
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135019 - Improper Resource Shutdown or Release
CVE-2026-48937
CWE-404 Medium
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260921174
and 3 more
#VU135020 - Improper Validation of Certificate with Host Mismatch
CVE-2026-48928
CWE-297 Medium
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135021 - Improper Null Termination
CVE-2026-48930
CWE-170 Medium
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 10 more
#VU135022 - Improper Certificate Validation
CVE-2026-48934
CWE-295 Medium
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 9 more
#VU135023 - Improper Access Control
CVE-2026-48935
CWE-284 Low
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 8 more
#VU135025 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-48931
CWE-367 Medium
No
No
22.23.0-1 22.06.2026 SB2026062248
SB20260728134
SB20260921174
and 3 more
#VU127580 - Allocation of Resources Without Limits or Throttling
CVE-2026-2581
CWE-770 Medium
No
No
22.23.0-1 24.04.2026 SB20260424137
SB20260424153
SB20260424154
and 3 more
#VU127579 - Improper Validation of Specified Quantity in Input
CVE-2026-1528
CWE-1284 Medium
No
No
22.23.0-1 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 13 more
#VU127046 - Improper input validation
CVE-2026-27135
CWE-20 Medium
No
No
20.20.2-1 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 37 more
#VU124549 - Improper Access Control
CVE-2026-21716
CWE-284 Low
No
No
22.22.0-5 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 18 more
#VU123140 - Inefficient Regular Expression Complexity
CVE-2026-26996
CWE-1333 Medium
No
No
20.20.2-1 23.02.2026 SB2026022345
SB2026030633
SB2026032328
and 35 more
#VU93881 - Permissions, Privileges, and Access Controls
CVE-2024-36137
CWE-264 Low
No
No
20.16.0-1, 22.22.0-5 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 23 more


Showing elements 1 - 20 out of 116