Latest vulnerabilities for "node.js" - SecAlerts

Where

Sort:

Recently updated

Recently published

-Infinity

0

Trending

Versions

Node.js Node.jsThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2367163

Node.js Node.jsRejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23165.

Risk 17

Severity

3.7

First published (updated )

Node.js Node.jsThe C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied…

Risk 46

Severity

7.5

First published (updated )

Node.js Node.jsIn Node.js, the `ReadFileUtf8` internal binding leaks memory due to a corrupted pointer in `uv_fs_s.…

Risk 21

Severity

3.7

First published (updated )

Fwd: Node.js security updates for all active lease lines, May 2025

First published (updated )

https://seclists.org/oss-sec/2025/q2/112

ip-utils ip-utilsSSRF

Risk 16

Severity

2.9

First published (updated )

Node.js Node.jsA memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY not…

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2342618

Node.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089

First published (updated )

https://seclists.org/oss-sec/2025/q1/87

Node.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089

First published (updated )

https://seclists.org/oss-sec/2025/q1/85

Node.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089

First published (updated )

https://seclists.org/oss-sec/2025/q1/80

Node.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089

First published (updated )

https://seclists.org/oss-sec/2025/q1/74

Node.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089

First published (updated )

https://seclists.org/oss-sec/2025/q1/73

Node.js Node.jsWith the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker threa…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2339392

Node.js Node.jsNode.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089

Risk 38

Severity

8.8

EPSS

0.04%

First published (updated )

Node.js Node.jsNode.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089

Risk 38

Severity

8.8

EPSS

0.04%

First published (updated )

Node.js Node.jsNode.js EOL CVEs: CVE-2025-23087, CVE-2025-23088, CVE-2025-23089

Risk 38

Severity

8.8

EPSS

0.04%

First published (updated )

Nodejs Node.jsNode.js security updates: CVE-2025-23083, CVE-2025-23084, CVE-2025-23085

Risk 30

Severity

5.6

EPSS

0.04%

First published (updated )

Node.js Node.jsNode.js security updates: CVE-2025-23083, CVE-2025-23084, CVE-2025-23085

Risk 20

Severity

5.3

EPSS

0.04%

First published (updated )

Fwd: Node.js security updates for all active lease lines, January 2025

First published (updated )

https://seclists.org/oss-sec/2025/q1/40

Node.js Node.jsA vulnerability has been identified in Node.js, affecting users of the experimental permission model…

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2299281

debian/nodejsout-of-bounds access in some 32-bit builds of Node.js

Risk 35

Severity

6.5

EPSS

0.11%

First published (updated )

Node.js Node.jsA vulnerability has been identified in Node.js, affecting users of the experimental permission model…

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2296990

Node.js Node.jsA security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network…

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2296417

Node.js Node.jsMalformed headers can lead to HTTP request smuggling. Specifically, if a space is placed before a co…

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2275392

NodeJS Command injection via args parameter of child_process.spawn without shell option enabled on Windows (CVE-2024-27980)

First published (updated )

https://seclists.org/oss-sec/2024/q2/79

Fwd: Node.js security update for all active relesae lines, April 9 2024

First published (updated )

https://seclists.org/oss-sec/2024/q2/78

Fwd: Node.js security update for all active relesae lines, April 9 2024

First published (updated )

https://seclists.org/oss-sec/2024/q2/34

Fwd: Node.js security update for all active release lines

First published (updated )

https://seclists.org/oss-sec/2024/q2/23

Fwd: Node.js security update for all active release lines

First published (updated )

https://seclists.org/oss-sec/2024/q2/21

Fwd: Node.js security update for all active release lines

First published (updated )

https://seclists.org/oss-sec/2024/q2/19

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203