NO
Product
nodejs
by nodejs · last CVE Jul 18, 2025
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 3Low 0
Watch

Add nodejs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-22020
6.5
1%
Jul 9
A security flaw in Node.js allows a bypass of network import restrictions
Affected: 21.6.1; 20.11.0; 18.19.0
CVE-2023-39333
5.3
1%
Sep 7
Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code
Affected: 18.0 before 18.18.2; 20.0 before 20.8.1
CVE-2023-30582
5.3
1%
Sep 7
A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non-* argument
Affected: 20.0 before 20.3.1
Showing 3