NO
Product
nodejs
12
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add nodejs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-36138 | 8.1 | Sep 7 | Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn /… Affected: 18.0 before 18.20.4; 20.0 before 20.15.1; 22.0 before 22.4.1 |
| CVE-2023-30584 | 7.7 | Sep 7 | A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model Affected: 20.0 before 20.3.1 |
| CVE-2025-27210 | 7.5 | Jul 18 | An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX Affected: 4.0 before 4.*; 5.0 before 5.*; 6.0 before 6.*; 7.0 before 7.*; 8.0 before 8.*; 9.0 before 9.*; +10 more |
| CVE-2023-30587 | 7.5 | Sep 7 | A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using the built-in inspector module (node:inspector) Affected: 20.0 before 20.3.1 |
| CVE-2023-30583 | 7.5 | Sep 7 | fs.openAsBlob() can bypass the experimental permission model when using the file system read restriction with the `--allow-fs-read` flag in Node.js 20 Affected: 20.0 before 20.3.1 |
| CVE-2023-46809 | 7.4 | Sep 7 | Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack -… Affected: 18.0 through 18.19.0; 20.0 through 20.11.0; 21.0 through 21.6.0 |
Showing 6