Known Vulnerabilities for Node by Nodejs
Listed below are 10 of the newest known vulnerabilities associated with "Node" by "Nodejs".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49143 json | BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauth... | Not Provided | 2026-06-02 | 2026-06-03 |
| CVE-2026-48922 json | Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48593 json | Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaus... | Not Provided | 2026-05-26 | 2026-05-27 |
| CVE-2026-48153 json | Budibase is an open-source low-code platform. Prior to 3.39.0, fetchToken in the OAuth2 SDK makes a POST to a builder-supplie... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48104 json | 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the... | Not Provided | 2026-06-05 | 2026-06-05 |
| CVE-2026-48092 json | 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via Squa... | Not Provided | 2026-06-05 | 2026-06-08 |
| CVE-2026-46510 json | form-data-objectizer converts FormData to object. Prior to 1.0.1, form-data-objectizer walks bracket-notation form keys (e.g.... | Not Provided | 2026-05-29 | 2026-06-02 |
| CVE-2026-46490 json | samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-46447 json | OpenStack Ironic before 35.0.2 allows Boot Script Injection of an iPXE script if the attacker can set node.driver_info or nod... | Not Provided | 2026-06-03 | 2026-06-04 |
| CVE-2026-46442 json | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1... | Not Provided | 2026-06-08 | 2026-06-08 |