Known vulnerabilities in nodejs-debuginfo

Vendor: openEuler
Software: nodejs-debuginfo
Software CPE: cpe:2.3:o:openeuler:nodejs-debuginfo:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 63
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs-debuginfo nodejs-debuginfo is affected by 63 known vulnerabilities: 6 high, 42 medium, 15 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-55131		 CWE-362 Low
No
No
 20.18.2-5 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 20 more
#VU126387 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-55130		 CWE-59 Low
No
No
 20.18.2-5 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU126388 - Uncaught Exception
CVE-2025-59465		 CWE-248 Medium
No
No
 12.22.11-11, 12.22.11-13, 20.18.2-5 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 23 more
#VU126389 - Uncaught Exception
CVE-2025-59466		 CWE-248 Medium
No
No
 20.18.2-5 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 17 more
#VU126390 - Missing release of memory after effective lifetime
CVE-2025-59464		 CWE-401 Medium
No
No
 20.18.2-5 17.04.2026 SB2026041708
SB2026041714
SB2026041715
and 3 more
#VU126391 - Improper Access Control
CVE-2026-21636		 CWE-284 Low
No
No
 20.18.2-5 17.04.2026 SB2026041708
SB2026041714
SB2026041715
and 2 more
#VU126392 - Improper Access Control
CVE-2025-55132		 CWE-284 Low
No
No
 20.18.2-5 17.04.2026 SB2026041708
SB2026041712
SB2026041714
and 13 more
#VU124546 - Missing release of memory after effective lifetime
CVE-2026-21714		 CWE-401 Medium
No
No
 12.22.11-11, 12.22.11-13, 20.18.2-7 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 23 more
#VU124547 - Creation of chroot Jail Without Changing Working Directory
CVE-2026-21717		 CWE-243 Medium
No
No
 20.18.2-7 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 19 more
#VU124548 - Improper Access Control
CVE-2026-21715		 CWE-284 Low
No
No
 20.18.2-7 25.03.2026 SB20260325154
SB2026032902
SB2026041564
and 18 more
#VU124549 - Improper Access Control
CVE-2026-21716		 CWE-284 Low
No
No
 20.18.2-7 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 18 more
#VU124541 - DEPRECATED: Often Misused: Path Manipulation
CVE-2026-21637		 CWE-249 High
No
No
 12.22.11-11, 12.22.11-13, 20.18.2-5 25.03.2026 SB2026032902
SB20260415182
SB20260415187
and 29 more
#VU124542 - Error Handling
CVE-2026-21710		 CWE-388 Medium
No
No
 20.18.2-7 25.03.2026 SB20260325154
SB2026032902
SB2026041056
and 33 more
#VU124545 - Information Exposure Through Timing Discrepancy
CVE-2026-21713		 CWE-208 Medium
No
No
 20.18.2-7 25.03.2026 SB20260325154
SB2026032902
SB2026041543
and 22 more
#VU109243 - Missing release of memory after effective lifetime
CVE-2025-23165		 CWE-401 Low
No
No
 20.18.2-3 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 17 more
#VU109241 - Error Handling
CVE-2025-23166		 CWE-388 Medium
No
No
 20.18.2-3 16.05.2025 SB2025051605
SB2025051901
SB2025051902
and 31 more
#VU103222 - Permissions, Privileges, and Access Controls
CVE-2025-23083		 CWE-264 Low
No
No
 20.18.2-1 22.01.2025 SB2025012252
SB2025012346
SB2025012402
and 21 more
#VU93882 - Permissions, Privileges, and Access Controls
CVE-2024-22018		 CWE-264 Low
No
No
 20.18.2-1 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 15 more
#VU93881 - Permissions, Privileges, and Access Controls
CVE-2024-36137		 CWE-264 Low
No
No
 20.18.2-2, 20.18.2-7 09.07.2024 SB2024070937
SB20240717120
SB2024072232
and 23 more
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020		 CWE-918 Medium
No
No
 20.18.2-1 09.07.2024 SB2024070937
SB2024071636
SB20240717119
and 30 more


Showing elements 1 - 20 out of 63