VulertSecurity VulertSecurity

Vulnerability Database · Alpine · nodejs · Version

nodejs 8.11.3-r1

8.11.3-r1 is affected by 30 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 6 High 18 Medium 6 Low 0 Unrated 0

All nodejs versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

nodejs 8.11.3-r1 vulnerabilities

30 vulnerabilities cover nodejs 8.11.3-r1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Prototype Pollution Vulnerability in Node.js Package y18n 9.8 critical 10.24.1-r0 17 Nov 2020
Prototype Pollution Vulnerability in y18n Package 9.8 critical 10.24.1-r0 17 Nov 2020
Critical HTTP Request Smuggling Vulnerability in Node.js Package 9.8 critical 10.19.0-r0 07 Feb 2020
HTTP Request Smuggling in Node.js 9.8 critical 10.19.0-r0 07 Feb 2020
Authorization Bypass in Node.js due to Trailing White Space in HTTP Header Values 9.8 critical 10.19.0-r0 07 Feb 2020
Authorization Bypass Vulnerability in Node.js Due to Trailing White Space in HTTP Headers 9.8 critical 10.19.0-r0 07 Feb 2020
Critical Certificate Validation Flaw in Node.js - ALPINE-CVE-2019-15604 7.5 high 10.19.0-r0 07 Feb 2020
Improper Certificate Validation in Node.js 7.5 high 10.19.0-r0 07 Feb 2020
Denial of Service Vulnerability in Node.js - CVE-2019-9518 7.5 high 10.16.3-r0 13 Aug 2019
Denial of Service Vulnerability in nodejs 7.5 high 10.16.3-r0 13 Aug 2019
HTTP/2 Settings Flood Denial of Service in nodejs 7.5 high 10.16.3-r0 13 Aug 2019
Denial of Service Vulnerability in Node.js - CVE-2019-9512 7.5 high 10.16.3-r0 13 Aug 2019
CVE-2019-9514: Denial of Service Vulnerability in nodejs 7.5 high 10.16.3-r0 13 Aug 2019
CVE-2019-9512: HTTP/2 Ping Flood Denial of Service in nodejs 7.5 high 10.16.3-r0 13 Aug 2019
Denial of Service Vulnerability in Node.js - CVE-2019-9514 7.5 high 10.16.3-r0 13 Aug 2019
Denial of Service Vulnerability in Node.js - CVE-2019-9515 7.5 high 10.16.3-r0 13 Aug 2019
Denial of Service Vulnerability in Node.js - CVE-2019-5737 7.5 high 10.15.3-r0 28 Mar 2019
Denial of Service (DoS) Vulnerability in Node.js 7.5 high 10.15.3-r0 28 Mar 2019
Denial of Service with large HTTP headers in Node.js 7.5 high 10.14.0-r0 28 Nov 2018
Denial of Service Vulnerability in Node.js Package - CVE-2018-12121 7.5 high 10.14.0-r0 28 Nov 2018
Denial of Service Vulnerability in Node.js - CVE-2018-12122 7.5 high 10.14.0-r0 28 Nov 2018
Node.js Slowloris HTTP Denial of Service (CVE-2018-12122) 7.5 high 10.14.0-r0 28 Nov 2018
Buffer Overflow Vulnerability in Node.js - CVE-2018-12115 7.5 high 8.11.4-r0 21 Aug 2018
Buffer Write Out-of-Bounds Vulnerability in Node.js 7.5 high 8.11.4-r0 21 Aug 2018
Critical Timing Side Channel Vulnerability in OpenSSL and Node.js Packages 5.9 medium 10.14.0-r0 30 Oct 2018
Timing Side Channel Attack in OpenSSL DSA Signature Algorithm 5.9 medium 10.14.0-r0 30 Oct 2018
Critical Timing Side Channel Vulnerability in OpenSSL and Node.js 5.9 medium 10.14.0-r0 29 Oct 2018
Timing Side Channel Attack in OpenSSL ECDSA Signature Algorithm 5.9 medium 10.14.0-r0 29 Oct 2018
Hostname Spoofing Vulnerability in Node.js Package - CVE-2018-12123 4.3 medium 10.14.0-r0 28 Nov 2018
Node.js URL Spoofing Vulnerability (CVE-2018-12123) 4.3 medium 10.14.0-r0 28 Nov 2018

Looking for another version, or everything Vulert holds for nodejs?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About nodejs 8.11.3-r1

Is nodejs 8.11.3-r1 vulnerable?

Yes. 30 vulnerabilities in the Vulert database cover nodejs 8.11.3-r1: 6 critical, 18 high, 6 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor nodejs for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the nodejs version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.