Known Vulnerabilities for products from Nodejs
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Nodejs".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-48527 json | Not Provided | 2026-05-29 | 2026-05-29 | |
| CVE-2026-47209 json | Not Provided | 2026-06-12 | 2026-06-12 | |
| CVE-2026-46511 json | Not Provided | 2026-06-05 | 2026-06-08 | |
| CVE-2026-46496 json | Not Provided | 2026-06-05 | 2026-06-05 | |
| CVE-2026-46493 json | Not Provided | 2026-06-05 | 2026-06-05 | |
| CVE-2026-46401 json | Not Provided | 2026-06-05 | 2026-06-08 | |
| CVE-2026-46400 json | Not Provided | 2026-06-05 | 2026-06-08 | |
| CVE-2026-46399 json | Not Provided | 2026-06-05 | 2026-06-08 | |
| CVE-2026-46398 json | Not Provided | 2026-06-05 | 2026-06-05 | |
| CVE-2026-46397 json | Not Provided | 2026-06-05 | 2026-06-08 | |
| CVE-2024-3566 json | A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend... | Not Provided | 2024-04-10 | 2026-05-15 |
| CVE-2023-45143 json | Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization ... | 3.5 - LOW | 2023-10-12 | 2023-11-03 |
| CVE-2023-39332 json | Various `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects. In Node.js environments, the `B... | 9.8 - CRITICAL | 2023-10-18 | 2023-11-17 |
| CVE-2023-39331 json | A previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit 205f1e6. The new path traversal vu... | 7.5 - HIGH | 2023-10-18 | 2023-11-17 |
| CVE-2023-38552 json | When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept ... | 7.5 - HIGH | 2023-10-18 | 2023-11-16 |
| CVE-2023-32559 json | A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x and,... | 7.5 - HIGH | 2023-08-24 | 2023-10-24 |
| CVE-2023-32558 json | The use of the deprecated API `process.binding()` can bypass the permission model through path traversal. This vulnerabilit... | 7.5 - HIGH | 2023-09-12 | 2023-12-04 |
| CVE-2023-32006 json | The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.jso... | 8.8 - HIGH | 2023-08-15 | 2023-09-15 |
| CVE-2023-32005 json | A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --al... | 5.3 - MEDIUM | 2023-09-12 | 2023-11-04 |
| CVE-2023-32004 json | A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw r... | 8.8 - HIGH | 2023-08-15 | 2023-09-15 |