Known Vulnerabilities for Node-fetch by Node-fetch Project
Listed below are 3 of the newest known vulnerabilities associated with "Node-fetch" by "Node-fetch Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-73410 json | Budibase is an open-source low-code platform. Prior to 3.40.0, packages/backend-core/src/utils/outboundFetch.ts pinned a vali... | Not Provided | 2026-08-17 | 2026-08-17 |
| CVE-2026-72770 json | n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations t... | Not Provided | 2026-08-11 | 2026-08-11 |
| CVE-2026-64459 json | In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_sock Co... | Not Provided | 2026-07-25 | 2026-08-17 |
| CVE-2026-54353 json | Budibase is an open-source low-code platform. Prior to 3.39.9, authenticated users with automation permissions can bypass Bud... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-53725 json | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. From version 9.8.0 to... | Not Provided | 2026-06-12 | 2026-06-13 |
| CVE-2026-53607 json | ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, when `prettyUrls: ... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-49857 json | auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages. Version 3.0.1 implements ... | Not Provided | 2026-08-13 | 2026-08-13 |
| CVE-2026-48153 json | Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplie... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-46701 json | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.4.5, the MCP SSE server defaults to an empty ... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-45061 json | Budibase is an open-source low-code platform. Prior to 3.35.10, the Plugin URL upload endpoint (POST /api/plugin) validates t... | Not Provided | 2026-05-27 | 2026-05-28 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 3.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.6.1 | |||
| Application | Node-fetch Project | Node-fetch | 2.6.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.5.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.4.1 | |||
| Application | Node-fetch Project | Node-fetch | 2.4.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.3.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.2.1 | |||
| Application | Node-fetch Project | Node-fetch | 2.2.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.1.2 | |||
| Application | Node-fetch Project | Node-fetch | 2.1.1 | |||
| Application | Node-fetch Project | Node-fetch | 2.1.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.0.0 | |||
| Application | Node-fetch Project | Node-fetch | 2.0.0 |