Known vulnerabilities in nodejs16-debugsource - page 2
Vendor:
SUSE
Software:
nodejs16-debugsource
Software CPE:
cpe:2.3:o:suse:nodejs16-debugsource:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
74
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
16.20.2-150400.3.42.1
16.20.2-150400.3.36.1
16.20.2-8.45.1
16.20.2-150400.3.33.1
16.20.2-150300.7.36.2
16.20.2-8.42.1
16.20.2-150400.3.30.1
16.20.2-150300.7.33.1
16.20.2-8.39.1
16.20.2-150300.7.30.1
16.20.2-150400.3.27.2
16.20.2-8.36.1
16.20.2-150300.7.27.2
16.20.2-150400.3.24.1
16.20.2-8.33.1
16.20.1-150300.7.24.2
16.20.1-150400.3.21.1
16.20.1-8.30.1
16.20.0-8.27.1
16.20.0-150300.7.21.2
16.20.0-150400.3.18.2
16.19.1-150300.7.18.1
16.19.1-150400.3.15.1
16.19.1-8.24.1
16.18.1-150300.7.15.1
16.18.1-150400.3.12.1
16.18.1-8.17.1
16.17.1-150400.3.9.1
16.17.1-150300.7.12.1
16.17.1-8.12.1
16.17.0-150300.7.9.1
16.17.0-150400.3.6.1
16.17.0-8.9.1
16.16.0-150300.7.6.2
16.16.0-150400.3.3.2
16.16.0-8.6.1
Vulnerabilities (74)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140045 - Improper input validation CVE-2026-58045 |
CWE-20 | Low | 16.20.2-150400.3.42.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU140032 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-15157 |
CWE-93 | Low | 16.20.2-150400.3.42.1 | 29.07.2026 |
SB2026072967 SB2026090821 SB2026091015 and 5 more |
||
| #VU134753 - Allocation of Resources Without Limits or Throttling CVE-2026-12151 |
CWE-770 | Medium | 16.20.2-150400.3.42.1 | 17.06.2026 |
SB2026061760 SB20260720393 SB2026080430 and 13 more |
||
| #VU134752 - Permissive List of Allowed Inputs CVE-2026-11525 |
CWE-183 | Low | 16.20.2-150400.3.42.1 | 17.06.2026 |
SB2026061760 SB2026080430 SB2026082715 and 9 more |
||
| #VU134751 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-6733 |
CWE-367 | Low | 16.20.2-150400.3.42.1 | 17.06.2026 |
SB2026061760 SB2026080430 SB2026082715 and 9 more |
||
| #VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-55131 |
CWE-362 | Low | 16.20.2-150400.3.42.1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 20 more |
||
| #VU126388 - Uncaught Exception CVE-2025-59465 |
CWE-248 | Medium | 16.20.2-150400.3.42.1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 23 more |
||
| #VU126389 - Uncaught Exception CVE-2025-59466 |
CWE-248 | Medium | 16.20.2-150400.3.42.1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 17 more |
||
| #VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-23167 |
CWE-444 | Medium | 16.20.2-150400.3.42.1 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051958 and 12 more |
||
| #VU109241 - Error Handling CVE-2025-23166 |
CWE-388 | Medium | 16.20.2-150400.3.42.1 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051902 and 31 more |
||
| #VU103225 - Missing release of memory after effective lifetime CVE-2025-23085 |
CWE-401 | Medium | 16.20.2-150400.3.42.1 | 22.01.2025 |
SB2025012252 SB2025012439 SB2025012440 and 30 more |
||
| #VU88178 - Insufficient Verification of Data Authenticity CVE-2024-30261 |
CWE-345 | Medium | 16.20.2-8.45.1, 16.20.2-150400.3.36.1 | 05.04.2024 |
SB2024040527 SB2024041611 SB2024041618 and 12 more |
||
| #VU88177 - Exposure of sensitive information to an unauthorized actor CVE-2024-30260 |
CWE-200 | Low | 16.20.2-8.45.1, 16.20.2-150400.3.36.1 | 05.04.2024 |
SB2024040527 SB2024041611 SB2024041618 and 11 more |
||
| #VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-27982 |
CWE-444 | Medium | 16.20.2-8.42.1, 16.20.2-150300.7.36.2, 16.20.2-150400.3.33.1 | 05.04.2024 |
SB2024040526 SB2024040851 SB2024040852 and 53 more |
||
| #VU88175 - Reachable Assertion CVE-2024-27983 |
CWE-617 | Medium | 16.20.2-8.42.1, 16.20.2-150300.7.36.2, 16.20.2-150400.3.33.1 | 05.04.2024 |
SB2024040526 SB2024040851 SB2024040852 and 56 more |
||
| #VU86733 - Improper input validation CVE-2024-22025 |
CWE-20 | Medium | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 34 more |
||
| #VU86724 - Covert Timing Channel CVE-2023-46809 |
CWE-385 | Medium | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 35 more |
||
| #VU86721 - Improper input validation CVE-2024-22019 |
CWE-20 | Medium | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 48 more |
||
| #VU86709 - Exposure of sensitive information to an unauthorized actor CVE-2024-24758 |
CWE-200 | Low | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022211 SB2024022225 SB2024022832 and 13 more |
||
| #VU86707 - Server-Side Request Forgery (SSRF) CVE-2024-24806 |
CWE-918 | Medium | 16.20.2-8.39.1, 16.20.2-150300.7.33.1, 16.20.2-150400.3.30.1 | 22.02.2024 |
SB2024022210 SB2024022214 SB2024022225 and 54 more |
Showing elements 21 - 40 out of 74