Vulnerabilities matching "nodejs" — 142 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
Unrated Critical Security Update for Node.js: Addressing Denial of Service Vulnerabilities nodejs AlmaLinux 06 Oct 2026 1:22.23.2-2.module_el9.8.0+322+f4aa738c
Unrated Critical Security Update for Node.js Packages: Addressing Denial of Service Vulnerabilities nodejs AlmaLinux 05 Oct 2026 1:22.23.2-3.el10_2
Unrated Critical Security Update for Node.js: Addressing Denial of Service Vulnerabilities nodejs AlmaLinux 05 Oct 2026 1:22.23.2-2.module_el8.10.0+4296+737cb4d7
Unrated Critical Security Update for Node.js: Authentication Bypass and Denial of Service Vulnerabilities nodejs AlmaLinux 30 Sep 2026 1:24.21.0-1.module_el8.10.0+4292+21afb960
Unrated Critical Security Update for Node.js: Authentication Bypass and Denial of Service Vulnerabilities nodejs AlmaLinux 30 Sep 2026 1:24.21.0-1.module_el9.8.0+321+1555b6a2
Unrated Critical Security Flaws in Node.js 24: Authentication Bypass and Denial of Service Vulnerabilities nodejs24 AlmaLinux 29 Sep 2026 1:24.21.0-1.el10_2
Unrated Critical Security Update for Node.js: Addressing Unauthorized Access and Memory Exhaustion Vulnerabilities nodejs AlmaLinux 02 Sep 2026 1:24.19.0-1.module_el8.10.0+4268+8e07aa5a
Unrated Critical Security Update for Node.js: Unauthorized Access and Denial of Service Vulnerabilities nodejs AlmaLinux 01 Sep 2026 1:22.23.2-1.module_el8.10.0+4265+75d28086
Unrated Critical Security Update for Node.js: Addressing Unauthorized Access and Memory Exhaustion Vulnerabilities nodejs AlmaLinux 31 Aug 2026 1:22.23.2-1.el10_2
Unrated Critical Security Update for Node.js: Addressing Unauthorized Access and Memory Exhaustion Vulnerabilities nodejs AlmaLinux 31 Aug 2026 1:24.19.0-1.module_el9.8.0+301+084fac05
Unrated Critical Security Update for Node.js: Addressing Unauthorized Access and Memory Exhaustion Vulnerabilities nodejs AlmaLinux 31 Aug 2026 1:22.23.2-1.module_el9.8.0+302+959ebcd4
Unrated Critical Security Update for Node.js 24: Addressing Multiple Vulnerabilities nodejs24 AlmaLinux 31 Aug 2026 1:24.19.0-1.el10_2
Unrated Critical Security Update for Node.js 24: Addressing Multiple Vulnerabilities nodejs24 AlmaLinux 24 Aug 2026 1:24.18.0-5.el10_2
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 17 Aug 2026 1:22.23.1-3.module_el9.8.0+291+0bb98cce
Unrated Critical Security Update for Node.js Packages: Addressing Denial of Service and SSRF Vulnerabilities nodejs AlmaLinux 17 Aug 2026 1:22.23.1-6.el10_2
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 17 Aug 2026 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 13 Aug 2026 1:22.23.1-3.module_el8.10.0+4251+b427b8a5
Unrated Critical Security Update for Node.js: Addressing Multiple Vulnerabilities nodejs AlmaLinux 12 Aug 2026 1:24.18.0-3.module_el8.10.0+4250+09238ed4
Unrated Critical Security Update for nodejs-nodemon: Denial of Service Vulnerability nodejs-nodemon AlmaLinux 10 Aug 2026 3.1.14-3.el10_2
Unrated Critical Security Update for nodejs-nodemon: Denial of Service Vulnerability nodejs-nodemon AlmaLinux 29 Jul 2026 3.1.14-2.el10_2
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.