VulertSecurity VulertSecurity

Vulnerability Database · Alpine · nodejs · Version

nodejs 22.11.0-r0

22.11.0-r0 is affected by 29 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 5 Medium 9 Low 5 Unrated 10

All nodejs versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

nodejs 22.11.0-r0 vulnerabilities

29 vulnerabilities cover nodejs 22.11.0-r0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Node.js TLS Hostname Handling Vulnerability - CVE-2026-48618 7.7 high 22.23.0-r0 26 Jun 2026
Heap Use-After-Free Vulnerability in Node.js HTTP/2 - CVE-2026-56848 7.5 high 22.23.2-r0 04 Aug 2026
Memory Exhaustion Vulnerability in Node.js HTTP/2 Handling 7.5 high 22.23.2-r0 04 Aug 2026
Node.js Filesystem Access Over-Granting Vulnerability - CVE-2026-58043 7.5 high 22.23.2-r0 30 Jul 2026
Critical Node.js WebCrypto Vulnerability in Alpine Packages: Process Crash Risk 7.5 high 22.23.0-r0 26 Jun 2026
Critical TLS Session Reuse Vulnerability in Node.js Affects Multiple Alpine Versions 6.3 medium 22.23.2-r0 30 Jul 2026
Node.js Synchronous zlib APIs Crash Vulnerability - CVE-2026-58045 6.2 medium 22.23.2-r0 04 Aug 2026
Denial of Service Vulnerability in Node.js Due to Excessive A Records in DNS Responses 5.9 medium 22.23.2-r0 04 Aug 2026
Node.js Proxy Tunnel Credentials Exposure Vulnerability in Alpine Packages 5.9 medium 22.23.0-r0 26 Jun 2026
Node.js TLS Hostname Handling Vulnerability in Node.js Packages 5.6 medium 22.23.0-r0 26 Jun 2026
Node.js HTTP/2 Client ORIGIN Frame Vulnerability - CVE-2026-48619 5.3 medium 22.23.0-r0 26 Jun 2026
Node.js TLS Host Verification Bypass Vulnerability - CVE-2026-48934 4.3 medium 22.23.0-r0 26 Jun 2026
Node.js Multi-Context mTLS Trust-Policy Bypass Vulnerability 4.2 medium 22.23.0-r0 26 Jun 2026
Node.js HTTPS Agent Connection Reuse Vulnerability - CVE-2026-56850 4.1 medium 22.23.2-r0 30 Jul 2026
Node.js HTTP Client Request Desynchronization Vulnerability in Node.js Packages 3.7 low 22.23.2-r0 04 Aug 2026
Node.js HTTP Agent Response Validation Flaw - CVE-2026-48931 3.7 low 22.23.0-r0 22 Jun 2026
Node.js Permission Model Flaw in Alpine Packages: CVE-2026-58039 3.3 low 22.23.2-r0 31 Jul 2026
Node.js Permission Model Flaw: Trace Logs Write Vulnerability 3.3 low 22.23.2-r0 30 Jul 2026
Node.js Permission API Vulnerability in Node.js Packages - CVE-2026-48935 3.3 low 22.23.0-r0 26 Jun 2026
Node.js Vulnerability in SignTraits::DeriveBits() - Remote Crash Risk N/A unrated 22.15.1-r0 19 May 2025
Memory Leak Vulnerability in Node.js Package - ALPINE-CVE-2025-23165 N/A unrated 22.15.1-r0 19 May 2025
Critical Background Thread Vulnerability in Node.js - CVE-2025-23166 N/A unrated 22.15.1-r0 19 May 2025
Memory Leak Vulnerability in Node.js - CVE-2025-23165 N/A unrated 22.15.1-r0 19 May 2025
Memory Leak Vulnerability in Node.js Package - CVE-2025-23085 N/A unrated 22.13.1-r0 07 Feb 2025
Memory Leak Vulnerability in Node.js HTTP/2 Server N/A unrated 22.13.1-r0 07 Feb 2025
Node.js Vulnerability in Worker Thread Management - ALPINE-CVE-2025-23083 N/A unrated 22.13.1-r0 22 Jan 2025
Critical Vulnerability in Node.js: Diagnostics Channel Event Hooking N/A unrated 22.13.1-r0 22 Jan 2025
Predictable Boundary Selection in Multipart Requests - Vulnerability in Node Undici N/A unrated 22.13.1-r0 21 Jan 2025
Critical Vulnerability in Node.js due to Undici's Predictable Randomness N/A unrated 22.13.1-r0 21 Jan 2025

Looking for another version, or everything Vulert holds for nodejs?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About nodejs 22.11.0-r0

Is nodejs 22.11.0-r0 vulnerable?

Yes. 29 vulnerabilities in the Vulert database cover nodejs 22.11.0-r0: 0 critical, 5 high, 9 medium and 5 low, plus 10 not yet rated. Each entry above names the fixed version to move to.

How do I monitor nodejs for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the nodejs version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.