Latest vulnerabilities for "nodejs node.js" - SecAlerts

Where

Sort:

Recently updated

Recently published

-Infinity

0

npm/nodeA flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network r…

Risk 63

Severity

10

EPSS

0.02%

First published (updated )

Nodejs Node.jsHackerOne: CVE-2026-21637 TLS PSK/ALPN Callback Exceptions Bypass Error Handlers

Risk 32

Severity

7.5

EPSS

0.03%

First published (updated )

Nodejs Node.jsWe have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors b…

Risk 46

Severity

7.5

First published (updated )

Node.js Node.jsA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to …

Risk 45

Severity

7.5

First published (updated )

Nodejs Node.jsA flaw in Node.js's permission model allows a file's access and modification timestamps to be change…

Risk 28

Severity

5.3

First published (updated )

Nodejs Node.jsNodeJS Security leases (CVE-2025-55131, CVE-2025-55130, CVE-2025-59465, and others)

Risk 46

Severity

7.5

First published (updated )

Nodejs Node.jsNodeJS Security leases (CVE-2025-55131, CVE-2025-55130, CVE-2025-59465, and others)

Risk 70

Severity

9.1

First published (updated )

Nodejs Node.jsCommand injection vulnerability in programing languages on Microsoft Windows operating system.

Risk 61

Severity

9.8

EPSS

0.04%

First published (updated )

IBM Cognos AnalyticsPath Traversal

Risk 89

Severity

9.8

First published (updated )

Apache Tomcat- Rapid Reset HTTP/2 vulnerability

Risk 65

Severity

7.5

First published (updated )

Fedoraproject FedoraOpenSSL3 CVE-2022-3602 CVE-2022-3786 vulnerabilities

Risk 89

Severity

9.8

First published (updated )

IBM Cloud Pak for Business AutomationOpenSSL3 CVE-2022-3602 CVE-2022-3786 vulnerabilities

Risk 45

Severity

7.5

First published (updated )

Nodejs Node.jsXSS

Risk 41

Severity

6.5

First published (updated )

Nodejs Node.jsXSS

Risk 41

Severity

6.5

First published (updated )

redhat/opensslVulnerability in OpenSSL library

Risk 47

Severity

7.5

First published (updated )

Nodejs Node.jsNode.js could provide weaker than expected security, caused by an error related to the formatting lo…

Risk 56

Severity

8.2

First published (updated )

Nodejs Node.jsNode.js could allow a remote attacker to bypass security restrictions, caused by a string injection …

Risk 58

Severity

7.4

First published (updated )

Nodejs Node.jsNode.js could allow a remote attacker to bypass security restrictions, caused by the improper handli…

Risk 58

Severity

7.4

First published (updated )

Nodejs Node.jsA flaw was found in node.js, where it did not properly handle multi-value Relative Distinguished Nam…

Risk 58

Severity

7.4

First published (updated )

OpenSSL OpenSSLInvalid handling of X509_verify_cert() internal errors in libssl

Risk 45

Severity

7.5

First published (updated )

Nodejs Node.jsInput Validation, XSS

Risk 89

Severity

9.8

First published (updated )

redhat/nodeNode.js is vulnerable to a denial of service, caused by an out-of-bounds read in the libuv's uv__idn…

Risk 28

Severity

5.3

First published (updated )

McAfee ePolicy OrchestratorInteger overflow in CipherUpdate

Risk 46

Severity

7.5

First published (updated )

IBM Cloud Pak for Security (CP4S)XSS

Risk 59

Severity

7.4

First published (updated )

IBM Cloud Pak for Security (CP4S)Use After Free

Risk 79

Severity

8.1

First published (updated )

redhat/opensslEDIPARTYNAME NULL pointer dereference

Risk 46

Severity

5.9

First published (updated )

Nodejs Node.jsBuffer Overflow

Risk 74

Severity

7.8

First published (updated )

Nodejs Node.jsRace Condition

Risk 75

Severity

8.1

First published (updated )

Nodejs Node.jsInput Validation

Risk 90

Severity

9.8

First published (updated )

Nodejs Node.jsLast updated 24 July 2024

Risk 45

Severity

7.5

First published (updated )

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203