Vulnerability Database · Alpine · nodejs · Version
nodejs 10.16.3-r0
10.16.3-r0 is affected by 8 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 6 High 2 Medium 0 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
nodejs 10.16.3-r0 vulnerabilities
8 vulnerabilities cover nodejs 10.16.3-r0. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Prototype Pollution Vulnerability in y18n Package | 9.8 critical | 10.24.1-r0 | 17 Nov 2020 |
| Critical Prototype Pollution Vulnerability in Node.js Package y18n | 9.8 critical | 10.24.1-r0 | 17 Nov 2020 |
| HTTP Request Smuggling in Node.js | 9.8 critical | 10.19.0-r0 | 07 Feb 2020 |
| Authorization Bypass in Node.js due to Trailing White Space in HTTP Header Values | 9.8 critical | 10.19.0-r0 | 07 Feb 2020 |
| Critical HTTP Request Smuggling Vulnerability in Node.js Package | 9.8 critical | 10.19.0-r0 | 07 Feb 2020 |
| Authorization Bypass Vulnerability in Node.js Due to Trailing White Space in HTTP Headers | 9.8 critical | 10.19.0-r0 | 07 Feb 2020 |
| Improper Certificate Validation in Node.js | 7.5 high | 10.19.0-r0 | 07 Feb 2020 |
| Critical Certificate Validation Flaw in Node.js - ALPINE-CVE-2019-15604 | 7.5 high | 10.19.0-r0 | 07 Feb 2020 |
Looking for another version, or everything Vulert holds for nodejs?
Questions
About nodejs 10.16.3-r0
Is nodejs 10.16.3-r0 vulnerable?
Yes. 8 vulnerabilities in the Vulert database cover nodejs 10.16.3-r0: 6 critical, 2 high, 0 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor nodejs for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the nodejs version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.