node.js Latest Vulnerabilities
Latest vulnerabilities published by node.js
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Vulnerability in XML Digital Signature Library for Node.js
CVE-2025-29775Node.jsxml-cryptoAuthentication Bypass Vulnerability in xml-crypto Library for Node.js
CVE-2025-29774Node.jsxml-cryptoWorker Thread Exposure in Node.js Affecting Various Versions
CVE-2025-23090Node.jsNodeArbitrary Command Injection Vulnerability in Child Process Functions of Software
CVE-2024-27980Node.jsNode.jsNode.js Experimental Permission Model Vulnerability
CVE-2024-22018Node.jsNode.js2.9LOWNode.js Security Flaw Allows Arbitrary Code Execution
CVE-2024-22020Node.jsNode.js6.5MEDIUMNode.js ip package vulnerable to SSRF due to incomplete fix for CVE-2023-42282
CVE-2024-29415Node.js📰8.1HIGHHTTP Request Smuggling Vulnerability in Node.js Core HTTP Server
CVE-2024-27982Node.jsNode6.5MEDIUMCommand Injection Vulnerability Affects Windows Applications
CVE-2024-3566Node.jsNode.jsAttacker Can Cause Complete Unavailability of Node.js HTTP/2 Server with Small Amount of Frames
CVE-2024-27983Node.jsNode👾🟡EPSS 68%8.2HIGHNode.js fetch() Function Vulnerability Allows for Denial of Service (DoS) Attacks Through Resource Exhaustion
CVE-2024-22025Node.jsNode.js6.5MEDIUMPrivilege Escalation Vulnerability in Node.js by Joyent
CVE-2024-22017Node.jsNode.js7.3HIGHNode.js Experimental Permission Model Vulnerability Affects All Users
CVE-2024-21896Node.jsNode.js9.8CRITICALMisleading Documentation Affects Node.js Users
CVE-2024-21890Node.jsNode.js6.5MEDIUMNode.js Vulnerability: Path Traversal Attack via Experimental Permission Model
CVE-2024-21891Node.jsNode.js📰8.8HIGHNode.js HTTP Servers Vulnerable to Resource Exhaustion Attacks
CVE-2024-22019Node.jsNode.js7.5HIGHUnprivileged Users Can Inject Code with Elevated Privileges in Node.js Due to Bug
CVE-2024-21892Node.jsNode.js7.8HIGHDirectory Traversal Vulnerability in Unzipper Library by NPM
CVE-2018-1002203Node.jsUnzipper5.5MEDIUMDenial of Service Vulnerability in Node.js by Joyent
CVE-2019-5739Node.jsNode.js7.5HIGHDenial of Service Vulnerability in Node.js by OpenJS Foundation
CVE-2019-5737Node.jsNode.js👾🟡EPSS 38%7.5HIGHHTTP Request Splitting in Node.js Versions Prior to 6.15.0 and 8.14.0
CVE-2018-12116The Node.js ProjectNode.js7.5HIGHRemote Code Execution Vulnerability in Node.js Debugger
CVE-2018-12120The Node.js ProjectNode.js8.1HIGHDenial of Service in Node.js Affecting Multiple Versions
CVE-2018-12121The Node.js ProjectNode.js7.5HIGHDenial of Service Vulnerability in Node.js from Multiple Versions
CVE-2018-12122The Node.js ProjectNode.js7.5HIGHHostname Spoofing Vulnerability in Node.js by Node.js Foundation
CVE-2018-12123The Node.js ProjectNode.js4.3MEDIUM