Product by NodeJS
Node
129 known vulnerabilities in Node (NodeJS), 0 of them actively exploited (CISA KEV).
Key figures
129
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
19
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-21710 | Node: security vulnerability | 7.5 | |
| Critical | CVE-2019-15605 | Node: HTTP Request/Response Smuggling | 9.8 | |
| Critical | CVE-2021-22930 | Node: Use After Free | 9.8 | |
| High | CVE-2024-27983 | Node: Race Condition | 8.2 | |
| Critical | CVE-2021-22931 | Node: Improper Null Termination | 9.8 | |
| Critical | CVE-2019-15606 | Node: Improper Input Validation | 9.8 | |
| High | CVE-2025-27210 | Node: security vulnerability | 7.5 | |
| High | CVE-2026-48933 | Node: Integer Overflow or Wraparound | 7.5 | |
| High | CVE-2022-21824 | Node: Modification of Assumed-Immutable Data (MAID) | 8.2 | |
| High | CVE-2022-43548 | Node: OS Command Injection | 8.1 | |
| High | CVE-2021-22883 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2025-59465 | Node: Denial of Service | 7.5 | |
| High | CVE-2020-8277 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-22884 | Node: Reliance on Reverse DNS Resolution for a Security-Critical Action | 7.5 | |
| High | CVE-2026-48618 | Node: Improper Handling of Unicode Encoding | 6.5 | |
| High | CVE-2019-15604 | Node: Improper Certificate Validation | 7.5 | |
| High | CVE-2020-8265 | Node: Use After Free | 8.1 | |
| Medium | CVE-2022-32214 | Node: HTTP Request/Response Smuggling | 6.5 | |
| Medium | CVE-2022-32215 | Node: HTTP Request/Response Smuggling | 6.5 | |
| High | CVE-2025-55131 | Node: Use of Uninitialized Memory | 7.1 | |
| High | CVE-2021-22940 | Node: Use After Free | 7.5 | |
| High | CVE-2022-32212 | Node: Improper Access Control | 8.1 | |
| Medium | CVE-2022-32213 | Node: HTTP Request/Response Smuggling | 6.5 | |
| High | CVE-2021-22921 | Node: Incorrect Permission Assignment for Critical Resource | 7.8 | |
| High | CVE-2021-44531 | Node: Improper Certificate Validation | 7.4 |
News
- Multiple Node.js CVEsfortinet-psirt,