Product by NodeJS
Node
203 known vulnerabilities in Node (NodeJS), 1 of them actively exploited (CISA KEV).
Key figures
203
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
27
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products | 7.5 | |
| High | CVE-2026-21710 | Node: security vulnerability | 7.5 | |
| Critical | CVE-2019-15605 | Node: HTTP Request/Response Smuggling | 9.8 | |
| Critical | CVE-2021-22930 | Node: Use After Free | 9.8 | |
| Critical | CVE-2016-6303 | OpenSSL: Out-of-Bounds Write | 9.8 | |
| Critical | CVE-2021-22931 | Node: Improper Null Termination | 9.8 | |
| Critical | CVE-2019-15606 | Node: Improper Input Validation | 9.8 | |
| Critical | CVE-2024-3566 | Node.js: Command Injection | 9.8 | |
| High | CVE-2026-48933 | Node: Integer Overflow or Wraparound | 7.5 | |
| Critical | CVE-2016-5180 | C-ares: Heap-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2016-9841 | zlib: security vulnerability | 9.8 | |
| High | CVE-2022-3602 | X.509 Email Address 4-byte Buffer Overflow | 7.5 | |
| High | CVE-2022-3786 | X.509 Email Address Variable Length Buffer Overflow | 7.5 | |
| Critical | CVE-2016-9843 | zlib: security vulnerability | 9.8 | |
| Critical | CVE-2015-6764 | Google Chrome: Out-of-Bounds Access | 9.8 | |
| High | CVE-2022-21824 | Node: Modification of Assumed-Immutable Data (MAID) | 8.2 | |
| High | CVE-2016-2183 | OpenSSL: security vulnerability | 7.5 | |
| High | CVE-2022-0778 | Infinite loop in BN_mod_sqrt() reachable when parsing certificates | 7.5 | |
| High | CVE-2019-9515 | F5 Big-ip Local Traffic Manager: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2022-43548 | Node: OS Command Injection | 8.1 | |
| High | CVE-2019-9512 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9514 | F5 Big-ip Local Traffic Manager: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2019-9513 | Node: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2018-7160 | The Node.js Project Node.js: Reliance on Reverse DNS Resolution for a Security-Critical Action | 8.8 | |
| High | CVE-2014-0224 | OpenSSL: Information Disclosure | 7.4 |
News
- Multiple Node.js CVEsfortinet-psirt,
- Vulnerability in OpenSSL libraryfortinet-psirt,
- SSA-408105 V1.1 (Last Update: 2023-04-11): Buffer Overflow Vulnerabilities in OpenSSL 3.0 Affecting Siemens Productssiemens-productcert
- SSA-712929 V1.8 (Last Update: 2023-03-14): Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Productssiemens-productcert
- SSA-408105 V1.0: Buffer Overflow Vulnerabilities in OpenSSL 3.0 Affecting Siemens Productssiemens-productcert
- SSA-712929 V1.0: Denial of Service Vulnerability in OpenSSL (CVE-2022-0778) Affecting Industrial Productssiemens-productcert