NO
Product
Node.js
by Nodejs · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
186
CVEs
2
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 19High 101Medium 55Low 6
Watch

Add Node.js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111497
In wildKEV
9.8
88%
Oct 22
Out-of-Bounds Write in Google Brotli Decoder
Affected: before 22.23.4; 23.0.0 before 24.22.1; 25.0.0 before 26.12.1
CVE-2023-44487
In wildKEV
7.5
100%
Oct 10
HTTP/2 Rapid Reset Attack Vulnerability
Affected: 18.0.0 before 18.18.2; 20.0.0 before 20.8.1
Showing 2