nodejs vulnerabilities — 44 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated Critical Security Update for Node.js: Addressing Denial of Service Vulnerabilities nodejs AlmaLinux 06 Oct 2026 1:22.23.2-2.module_el9.8.0+322+f4aa738c
Unrated Critical Security Update for Node.js: Authentication Bypass and Denial of Service Vulnerabilities nodejs AlmaLinux 30 Sep 2026 1:24.21.0-1.module_el9.8.0+321+1555b6a2
Unrated Critical Security Update for Node.js: Addressing Unauthorized Access and Memory Exhaustion Vulnerabilities nodejs AlmaLinux 31 Aug 2026 1:24.19.0-1.module_el9.8.0+301+084fac05
Unrated Critical Security Update for Node.js: Addressing Unauthorized Access and Memory Exhaustion Vulnerabilities nodejs AlmaLinux 31 Aug 2026 1:22.23.2-1.module_el9.8.0+302+959ebcd4
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 17 Aug 2026 1:22.23.1-3.module_el9.8.0+291+0bb98cce
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 17 Aug 2026 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2
Unrated Critical Security Update for Node.js: Addressing Denial of Service Vulnerabilities nodejs AlmaLinux 28 Jul 2026 1:22.23.1-2.module_el9.8.0+285+5c3b0251
Unrated Critical Security Update for Node.js: Addressing Denial of Service Vulnerabilities nodejs AlmaLinux 28 Jul 2026 1:24.18.0-3.module_el9.8.0+286+9023ffdb
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 06 Jul 2026 1:24.18.0-1.module_el9.8.0+277+61fc613e
Unrated Critical Security Update for Node.js: Important Vulnerabilities Addressed nodejs AlmaLinux 06 Jul 2026 1:22.23.1-1.module_el9.8.0+276+8b329b47
Unrated Critical Security Update for Node.js: Denial of Service Vulnerabilities nodejs AlmaLinux 13 Apr 2026 1:20.20.2-1.module_el9.7.0+226+88d36870
Unrated Critical Security Update for Node.js: Denial of Service Vulnerabilities nodejs AlmaLinux 09 Apr 2026 1:24.14.1-2.module_el9.7.0+222+ef1c61e1
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 17 Feb 2026 1:20.20.0-1.module_el9.7.0+207+84573810
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 17 Feb 2026 1:22.22.0-1.module_el9.7.0+208+fb06c0ab
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 17 Feb 2026 1:24.13.0-1.module_el9.7.0+209+ecf6523e
Unrated Critical Security Update for Node.js: Remote Crash Vulnerability (CVE-2025-23166) nodejs AlmaLinux 03 Jun 2025 1:20.19.2-1.module_el9.6.0+169+c9cb05c2
Unrated Critical Vulnerability in Node.js: Remote Crash via SignTraits::DeriveBits() nodejs AlmaLinux 03 Jun 2025 1:22.16.0-1.module_el9.6.0+170+f035de78
Unrated Moderate Security Update for Node.js: Addressing Use-After-Free Vulnerability nodejs AlmaLinux 13 May 2025 1:20.19.1-1.module_el9.6.0+163+d268fe53
Unrated Critical Security Update for Node.js: Addressing Use-After-Free and Integer Overflow Vulnerabilities nodejs AlmaLinux 13 May 2025 1:22.15.0-1.module_el9.6.0+164+2d89b8ed
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 17 Feb 2025 1:22.13.1-1.module_el9.5.0+139+09296491
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.