VulertSecurity VulertSecurity

Vulnerability Database · Alpine · nodejs · Version

nodejs 8.9.2-r0

8.9.2-r0 is affected by 35 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 4 High 25 Medium 6 Low 0 Unrated 0

All nodejs versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

nodejs 8.9.2-r0 vulnerabilities

35 vulnerabilities cover nodejs 8.9.2-r0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Memory Corruption Vulnerability in Node.js - CVE-2021-22930 9.8 critical 12.22.4-r0 07 Oct 2021
Use After Free Vulnerability in Node.js 9.8 critical 12.22.4-r0 07 Oct 2021
Critical Remote Code Execution Vulnerability in Node.js Package 9.8 critical 12.22.5-r0 16 Aug 2021
Remote Code Execution, XSS, and Application Crashes in Node.js dns Library 9.8 critical 12.22.5-r0 16 Aug 2021
Arbitrary File Creation and Code Execution in npm package 'tar' 8.6 high 12.22.6-r0 31 Aug 2021
Arbitrary File Creation and Code Execution Vulnerability in Node.js Package 'tar' 8.6 high 12.22.6-r0 31 Aug 2021
Arbitrary File Creation and Code Execution Vulnerability in Node.js Tar Package 8.6 high 12.22.6-r0 31 Aug 2021
Arbitrary File Creation and Code Execution Vulnerability in npm package "tar" 8.6 high 12.22.6-r0 31 Aug 2021
Arbitrary File Creation and Code Execution in npm package "tar" 8.6 high 12.22.6-r0 31 Aug 2021
Arbitrary File Creation and Code Execution Vulnerability in Node.js Tar Package 8.6 high 12.22.6-r0 31 Aug 2021
Use-After-Free Vulnerability in Node.js TLS Implementation (CVE-2020-8265) 8.1 high 12.20.1-r0 06 Jan 2021
Critical Use-After-Free Vulnerability in Node.js Package 8.1 high 12.20.1-r0 06 Jan 2021
Memory Corruption Vulnerability in Node.js 8.1 high 12.20.1-r0 24 Jul 2020
Critical Memory Corruption Vulnerability in Node.js Affecting Alpine Packages 8.1 high 12.20.1-r0 24 Jul 2020
Critical Vulnerability in Node.js Package Management: Arbitrary File Write Risk 7.8 high 12.22.6-r0 31 Aug 2021
Arbitrary File Write Vulnerability in Node.js Package: @npmcli/arborist 7.8 high 12.22.6-r0 31 Aug 2021
Arbitrary File Write Vulnerability in @npmcli/arborist 7.8 high 12.22.6-r0 31 Aug 2021
Arborist Library - Arbitrary File Write Vulnerability (CVE-2021-39134) 7.8 high 12.22.6-r0 31 Aug 2021
Buffer Overflow Vulnerability in libuv and Node.js 7.8 high 12.20.1-r0 18 Sep 2020
Denial of Service Vulnerability in Node.js - CVE-2021-22883 7.5 high 12.21.0-r0 03 Mar 2021
DNS Rebinding Vulnerability in Node.js Package 7.5 high 12.21.0-r0 03 Mar 2021
DNS Rebinding Vulnerability in Node.js 7.5 high 12.21.0-r0 03 Mar 2021
Denial of Service Vulnerability in Node.js 7.5 high 12.21.0-r0 03 Mar 2021
Denial of Service Vulnerability in Node.js Package - CVE-2020-8277 7.5 high 12.20.1-r0 19 Nov 2020
Denial of Service Vulnerability in Node.js 7.5 high 12.20.1-r0 19 Nov 2020
Critical HTTP Desync Attack Vulnerability in Node.js Package 7.4 high 12.20.1-r0 18 Sep 2020
HTTP Desync Attack Vulnerability in Node.js 7.4 high 12.20.1-r0 18 Sep 2020
TLS Session Reuse Vulnerability in Node.js - CVE-2020-8172 7.4 high 12.20.1-r0 08 Jun 2020
TLS Session Reuse Host Certificate Verification Bypass in Node.js 7.4 high 12.20.1-r0 08 Jun 2020
HTTP Request Smuggling in Node.js 6.5 medium 12.20.1-r0 06 Jan 2021
HTTP Request Smuggling Vulnerability in Node.js Package 6.5 medium 12.20.1-r0 06 Jan 2021
Node.js Package Vulnerability: Acceptance of Expired Certificates 5.3 medium 12.22.5-r0 16 Aug 2021
Vulnerability in Node.js https API 5.3 medium 12.22.5-r0 16 Aug 2021
Out-of-Bounds Read Vulnerability in Node.js - CVE-2021-22918 5.3 medium 12.22.2-r0 12 Jul 2021
Out-of-Bounds Read Vulnerability in Node.js 5.3 medium 12.22.2-r0 12 Jul 2021

Looking for another version, or everything Vulert holds for nodejs?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About nodejs 8.9.2-r0

Is nodejs 8.9.2-r0 vulnerable?

Yes. 35 vulnerabilities in the Vulert database cover nodejs 8.9.2-r0: 4 critical, 25 high, 6 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor nodejs for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the nodejs version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.