Known Vulnerabilities for Node by Nodejs
Listed below are 10 of the newest known vulnerabilities associated with "Node" by "Nodejs".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125379 json | Movim through 0.35.5 contains an authorization bypass vulnerability in Post::ajaxGetPost that allows authenticated users to r... | Not Provided | 2026-11-10 | 2026-11-09 |
| CVE-2026-125186 json | FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in the dts2pts bitstream filter that allows ... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-124683 json | Eclipse Langium versions 3.2.0 through 4.4.0 contain an inefficient algorithmic complexity issue (CWE-407) in the opt-in Inde... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-124078 json | plist.js (npm package 'plist') before 5.0.1 contains an uncontrolled resource consumption vulnerability in the binary propert... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-124031 json | GPAC through 26.07.0 contains a type confusion vulnerability in drawable_get_aspect_2d_mpeg4() and TraverseShape() that casts... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-124030 json | GPAC through 26.07.0 contains a type confusion vulnerability in gf_sg_command_apply() in src/scenegraph/commands.c that fails... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-123562 json | devalue (sveltejs/devalue) 5.8.0 before 5.9.3 contains an unhandled promise rejection in stringifyAsync: when serializing mul... | Not Provided | 2026-11-08 | 2026-11-09 |
| CVE-2026-123560 json | Zebra before 7.0.0 contains an incomplete cleanup vulnerability that allows unauthenticated peers to stall initial sync by se... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123557 json | ZcashFoundation Zebra zebrad before 7.0.0 contains a reachable assertion race condition that allows unauthenticated remote pe... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123487 json | Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 validates user email address format with a regular expression who... | Not Provided | 2026-11-06 | 2026-11-06 |