Known Vulnerabilities for Node-import by Node-import Project
Listed below are 1 of the newest known vulnerabilities associated with "Node-import" by "Node-import Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58578 json | LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service (ReDoS) vulnerability that allows au... | Not Provided | 2026-07-02 | 2026-07-14 |
| CVE-2026-55388 json | piscina is a node.js worker pool implementation. Prior to 6.0.0-rc.2, 5.2.0, and 4.9.3, piscina's constructor and run() paths... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-54149 json | MaxKB is an open-source AI assistant for enterprise. Prior to 2.10.0-lts, MaxKB tool import functionality in apps/tools/seria... | Not Provided | 2026-07-10 | 2026-07-10 |
| CVE-2026-50195 json | containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI c... | Not Provided | 2026-07-01 | 2026-07-01 |
| CVE-2026-48546 json | KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploitin... | Not Provided | 2026-06-11 | 2026-07-14 |
| CVE-2026-45012 json | ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 contain an authenticat... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-44003 json | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.0, vm2's code transformer has a performance optimization that ski... | Not Provided | 2026-05-13 | 2026-05-13 |
| CVE-2026-43995 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, multiple tool implem... | Not Provided | 2026-05-11 | 2026-05-11 |
| CVE-2026-40197 json | Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage vo... | Not Provided | 2026-05-06 | 2026-05-07 |
| CVE-2026-39911 json | Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed JavaScript execution vulnerability... | Not Provided | 2026-04-09 | 2026-07-14 |