Latest vulnerabilities for "node.js node.js" - SecAlerts

Where

Sort:

Recently updated

Recently published

-Infinity

0

Trending

Nodejs Node.jsA flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before th…

Risk 21

Severity

3.7

First published (updated )

Node.js Node.jsA flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path…

Risk 11

Severity

1.8

First published (updated )

oss-secFwd: Node.js security updates for all active lease lines, June 2026

First published (updated )

https://seclists.org/oss-sec/2026/q2/875

Node.js Node.jsA flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operat…

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2453158

Node.js Node.jsAn incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the pro…

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2453157

Node.js Node.jsA memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 …

Risk 19

Severity

4

First published (updated )

REDHAT-BUG-2453161

Node.js Node.jsA flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received wi…

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2453151

Node.js Node.jsA flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received wi…

Risk 46

Severity

7.5

First published (updated )

Node.js Node.jsA flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provide…

Risk 38

Severity

5.9

First published (updated )

Node.js Node.jsA flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric va…

Risk 38

Severity

5.9

First published (updated )

Node.js Node.jsA flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operat…

Risk 41

Severity

5.3

First published (updated )

Node.js Node.jsA flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()` without …

Risk 19

Severity

3.3

First published (updated )

oss-secNodeJS Security leases fixes High, 5 Medium, 2 Low severity issues

First published (updated )

https://seclists.org/oss-sec/2026/q1/379

Node.js Node.jsA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to …

Risk 45

Severity

7.5

First published (updated )

Node.js Node.jsA flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using `\r\n\rX` ins…

Risk 42

Severity

6.5

First published (updated )

Node.js Node.jsRejected reason: This CVE record has been withdrawn due to a duplicate entry CVE-2025-23083.

Risk 28

Severity

7

EPSS

0.04%

First published (updated )

Node.js Node.jsNode.js security updates: CVE-2025-23083, CVE-2025-23084, CVE-2025-23085

Risk 43

Severity

7.7

EPSS

0.04%

First published (updated )

Elliptic EllipticThe verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js …

Risk 32

Severity

7

First published (updated )

REDHAT-BUG-2317724

Elliptic EllipticIn the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a mi…

Risk 18

Severity

4

First published (updated )

REDHAT-BUG-2302458

indutny node-ipSSRF

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2284554

Node.js Node.jsMaliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The i…

Risk 5

Severity

1

First published (updated )

REDHAT-BUG-2244418

Node.js Node.jsPath Traversal

Risk 33

Severity

7

First published (updated )

REDHAT-BUG-2244414

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203