VulertSecurity VulertSecurity

Vulnerability Database · Search

nodejs vulnerabilities — 29 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
7.5 high Heap Use-After-Free Vulnerability in Node.js HTTP/2 - CVE-2026-56848 nodejs Alpine 04 Aug 2026 22.23.2-r0
6.2 medium Node.js Synchronous zlib APIs Crash Vulnerability - CVE-2026-58045 nodejs Alpine 04 Aug 2026 22.23.2-r0
3.7 low Node.js HTTP Client Request Desynchronization Vulnerability in Node.js Packages nodejs Alpine 04 Aug 2026 22.23.2-r0
5.9 medium Denial of Service Vulnerability in Node.js Due to Excessive A Records in DNS Responses nodejs Alpine 04 Aug 2026 22.23.2-r0
7.5 high Memory Exhaustion Vulnerability in Node.js HTTP/2 Handling nodejs Alpine 04 Aug 2026 22.23.2-r0
3.3 low Node.js Permission Model Flaw in Alpine Packages: CVE-2026-58039 nodejs Alpine 31 Jul 2026 22.23.2-r0
7.5 high Node.js Filesystem Access Over-Granting Vulnerability - CVE-2026-58043 nodejs Alpine 30 Jul 2026 22.23.2-r0
6.3 medium Critical TLS Session Reuse Vulnerability in Node.js Affects Multiple Alpine Versions nodejs Alpine 30 Jul 2026 22.23.2-r0
4.1 medium Node.js HTTPS Agent Connection Reuse Vulnerability - CVE-2026-56850 nodejs Alpine 30 Jul 2026 22.23.2-r0
3.3 low Node.js Permission Model Flaw: Trace Logs Write Vulnerability nodejs Alpine 30 Jul 2026 22.23.2-r0
3.3 low Node.js Permission API Vulnerability in Node.js Packages - CVE-2026-48935 nodejs Alpine 26 Jun 2026 22.23.0-r0
4.2 medium Node.js Multi-Context mTLS Trust-Policy Bypass Vulnerability nodejs Alpine 26 Jun 2026 22.23.0-r0
4.3 medium Node.js TLS Host Verification Bypass Vulnerability - CVE-2026-48934 nodejs Alpine 26 Jun 2026 22.23.0-r0
7.5 high Critical Node.js WebCrypto Vulnerability in Alpine Packages: Process Crash Risk nodejs Alpine 26 Jun 2026 22.23.0-r0
5.6 medium Node.js TLS Hostname Handling Vulnerability in Node.js Packages nodejs Alpine 26 Jun 2026 22.23.0-r0
5.3 medium Node.js HTTP/2 Client ORIGIN Frame Vulnerability - CVE-2026-48619 nodejs Alpine 26 Jun 2026 22.23.0-r0
7.7 high Node.js TLS Hostname Handling Vulnerability - CVE-2026-48618 nodejs Alpine 26 Jun 2026 22.23.0-r0
5.9 medium Node.js Proxy Tunnel Credentials Exposure Vulnerability in Alpine Packages nodejs Alpine 26 Jun 2026 22.23.0-r0
3.7 low Node.js HTTP Agent Response Validation Flaw - CVE-2026-48931 nodejs Alpine 22 Jun 2026 22.23.0-r0
Unrated Node.js Vulnerability in SignTraits::DeriveBits() - Remote Crash Risk nodejs Alpine 19 May 2025 22.15.1-r0
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.