Vulnerability Database · Alpine · nodejs · Version
nodejs 14.15.5-r0
14.15.5-r0 is affected by 10 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 2 Medium 8 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
nodejs 14.15.5-r0 vulnerabilities
10 vulnerabilities cover nodejs 14.15.5-r0. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Denial of Service Vulnerability in ssri | 7.5 high | 14.16.1-r1 | 12 Mar 2021 |
| Denial of Service Vulnerability in Node.js due to ssri Package Processing | 7.5 high | 14.16.1-r1 | 12 Mar 2021 |
| HTTP Request Smuggling in Node.js | 6.5 medium | 14.20.1-r0 | 05 Dec 2022 |
| HTTP Request Smuggling Vulnerability in Node.js - CVE-2022-35256 | 6.5 medium | 14.20.1-r0 | 05 Dec 2022 |
| HTTP Request Smuggling Vulnerability in Node.js | 6.5 medium | 14.20.1-r0 | 14 Jul 2022 |
| HTTP Request Smuggling (HRS) Vulnerability in Node.js | 6.5 medium | 14.20.1-r0 | 14 Jul 2022 |
| HTTP Request Smuggling Vulnerability in Node.js | 6.5 medium | 14.20.1-r0 | 14 Jul 2022 |
| HTTP Request Smuggling Vulnerability in Node.js Package | 6.5 medium | 14.20.1-r0 | 14 Jul 2022 |
| HTTP Request Smuggling Vulnerability in Node.js Package | 6.5 medium | 14.20.1-r0 | 14 Jul 2022 |
| HTTP Request Smuggling Vulnerability in Node.js Package | 6.5 medium | 14.20.1-r0 | 14 Jul 2022 |
Looking for another version, or everything Vulert holds for nodejs?
Questions
About nodejs 14.15.5-r0
Is nodejs 14.15.5-r0 vulnerable?
Yes. 10 vulnerabilities in the Vulert database cover nodejs 14.15.5-r0: 0 critical, 2 high, 8 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor nodejs for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the nodejs version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.