Known vulnerabilities in nodejs18-docs - page 2
Vendor:
SUSE
Software:
nodejs18-docs
Software CPE:
cpe:2.3:o:suse:nodejs18-docs:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
84
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
18.20.8-8.44.1
18.20.8-150400.9.39.1
18.20.8-8.41.1
18.20.8-8.36.1
18.20.8-150400.9.36.1
18.20.6-8.33.1
18.20.6-150400.9.33.1
18.20.5-150400.9.30.1
18.20.5-8.30.1
18.20.4-8.27.2
18.20.4-150400.9.24.2
18.20.4-8.24.1
18.20.1-150400.9.21.3
18.20.1-8.21.1
18.19.1-150400.9.18.2
18.19.1-8.18.1
18.18.2-8.15.1
18.18.2-150400.9.15.1
18.17.1-150400.9.12.1
18.17.1-8.12.1
18.16.1-150400.9.9.1
18.16.1-8.9.1
18.14.2-150400.9.6.2
18.14.2-8.6.2
18.13.0-150400.9.3.1
18.13.0-8.3.1
Vulnerabilities (84)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140038 - Resource exhaustion CVE-2026-56846 |
CWE-400 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 11 more |
||
| #VU140039 - Use After Free CVE-2026-56848 |
CWE-416 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 11 more |
||
| #VU140040 - Improper Access Control CVE-2026-58043 |
CWE-284 | Low | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072975 SB2026083143 SB2026083144 and 9 more |
||
| #VU140041 - Authentication Bypass by Primary Weakness CVE-2026-56850 |
CWE-305 | Low | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 5 more |
||
| #VU140042 - Improper Certificate Validation CVE-2026-58040 |
CWE-295 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU140044 - Improper input validation CVE-2026-58042 |
CWE-20 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU140045 - Improper input validation CVE-2026-58045 |
CWE-20 | Low | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU140048 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-58044 |
CWE-444 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 29.07.2026 |
SB2026072975 SB20260831126 SB20260831127 and 4 more |
||
| #VU135014 - Integer overflow CVE-2026-48933 |
CWE-190 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 10 more |
||
| #VU135019 - Improper Resource Shutdown or Release CVE-2026-48937 |
CWE-404 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260921174 and 3 more |
||
| #VU135022 - Improper Certificate Validation CVE-2026-48934 |
CWE-295 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 9 more |
||
| #VU135023 - Improper Access Control CVE-2026-48935 |
CWE-284 | Low | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260831117 and 8 more |
||
| #VU135025 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-48931 |
CWE-367 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.06.2026 |
SB2026062248 SB20260728134 SB20260921174 and 3 more |
||
| #VU134756 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2026-9679 |
CWE-93 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 17.06.2026 |
SB2026061760 SB2026080430 SB2026082715 and 4 more |
||
| #VU134751 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-6733 |
CWE-367 | Low | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 17.06.2026 |
SB2026061760 SB2026080430 SB2026082715 and 9 more |
||
| #VU113173 - Use of Insufficiently Random Values CVE-2025-7783 |
CWE-330 | Medium | 18.20.8-8.41.1 | 23.07.2025 |
SB2025072332 SB2025072333 SB2025081876 and 63 more |
||
| #VU109242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-23167 |
CWE-444 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051958 and 12 more |
||
| #VU109241 - Error Handling CVE-2025-23166 |
CWE-388 | Medium | 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 16.05.2025 |
SB2025051605 SB2025051901 SB2025051902 and 31 more |
||
| #VU103227 - Use of Insufficiently Random Values CVE-2025-22150 |
CWE-330 | Medium | 18.20.6-8.33.1, 18.20.6-150400.9.33.1, 18.20.8-8.44.1, 18.20.8-150400.9.39.1 | 22.01.2025 |
SB2025012259 SB2025012439 SB2025012440 and 29 more |
||
| #VU103225 - Missing release of memory after effective lifetime CVE-2025-23085 |
CWE-401 | Medium | 18.20.6-8.33.1, 18.20.6-150400.9.33.1 | 22.01.2025 |
SB2025012252 SB2025012439 SB2025012440 and 30 more |
Showing elements 21 - 40 out of 84