Known vulnerabilities in nodejs18-devel
Vendor:
SUSE
Software:
nodejs18-devel
Software CPE:
cpe:2.3:o:suse:nodejs18-devel:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
84
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
18.20.8-8.44.1
18.20.8-150400.9.39.1
18.20.8-8.41.1
18.20.8-8.36.1
18.20.8-150400.9.36.1
18.20.6-8.33.1
18.20.6-150400.9.33.1
18.20.5-150400.9.30.1
18.20.5-8.30.1
18.20.4-8.27.2
18.20.4-150400.9.24.2
18.20.4-8.24.1
18.20.1-150400.9.21.3
18.20.1-8.21.1
18.19.1-150400.9.18.2
18.19.1-8.18.1
18.18.2-8.15.1
18.18.2-150400.9.15.1
18.17.1-150400.9.12.1
18.17.1-8.12.1
18.16.1-150400.9.9.1
18.16.1-8.9.1
18.14.2-150400.9.6.2
18.14.2-8.6.2
18.13.0-150400.9.3.1
18.13.0-8.3.1
Vulnerabilities (84)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140036 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2026-16729 |
CWE-74 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072967 SB2026090821 SB2026091015 and 4 more |
||
| #VU140034 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-16728 |
CWE-444 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072967 SB2026090821 SB2026091015 and 4 more |
||
| #VU140032 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-15157 |
CWE-93 | Low | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072967 SB2026090821 SB2026091015 and 5 more |
||
| #VU135015 - Improper input validation CVE-2026-48618 |
CWE-20 | High | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 11 more |
||
| #VU135018 - Resource exhaustion CVE-2026-48619 |
CWE-400 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 9 more |
||
| #VU135020 - Improper Validation of Certificate with Host Mismatch CVE-2026-48928 |
CWE-297 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 9 more |
||
| #VU135021 - Improper Null Termination CVE-2026-48930 |
CWE-170 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 10 more |
||
| #VU134753 - Allocation of Resources Without Limits or Throttling CVE-2026-12151 |
CWE-770 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 17.06.2026 |
SB2026061760 SB20260720393 SB2026080430 and 13 more |
||
| #VU134752 - Permissive List of Allowed Inputs CVE-2026-11525 |
CWE-183 | Low | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 17.06.2026 |
SB2026061760 SB2026080430 SB2026082715 and 9 more |
||
| #VU127582 - Allocation of Resources Without Limits or Throttling CVE-2026-22036 |
CWE-770 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 24.04.2026 |
SB20260424138 SB20260424156 SB20260424157 and 9 more |
||
| #VU127046 - Improper input validation CVE-2026-27135 |
CWE-20 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 23.04.2026 |
SB2026042395 SB20260423101 SB20260423102 and 37 more |
||
| #VU126386 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2025-55131 |
CWE-362 | Low | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 20 more |
||
| #VU126388 - Uncaught Exception CVE-2025-59465 |
CWE-248 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 23 more |
||
| #VU126389 - Uncaught Exception CVE-2025-59466 |
CWE-248 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 17.04.2026 |
SB2026041708 SB2026041712 SB2026041714 and 17 more |
||
| #VU124546 - Missing release of memory after effective lifetime CVE-2026-21714 |
CWE-401 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 25.03.2026 |
SB20260325154 SB2026032902 SB20260415182 and 23 more |
||
| #VU124547 - Creation of chroot Jail Without Changing Working Directory CVE-2026-21717 |
CWE-243 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 25.03.2026 |
SB20260325154 SB2026032902 SB20260415182 and 19 more |
||
| #VU124541 - DEPRECATED: Often Misused: Path Manipulation CVE-2026-21637 |
CWE-249 | High | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 25.03.2026 |
SB2026032902 SB20260415182 SB20260415187 and 29 more |
||
| #VU124542 - Error Handling CVE-2026-21710 |
CWE-388 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 25.03.2026 |
SB20260325154 SB2026032902 SB2026041056 and 33 more |
||
| #VU124545 - Information Exposure Through Timing Discrepancy CVE-2026-21713 |
CWE-208 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 25.03.2026 |
SB20260325154 SB2026032902 SB2026041543 and 22 more |
||
| #VU119383 - Use After Free CVE-2025-62408 |
CWE-416 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 08.12.2025 |
SB20251208136 SB2025121313 SB2025121888 and 4 more |
Showing elements 1 - 20 out of 84