# Node.js.

Every CVE that names Node.js among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Command injection vulnerability in programing languages on Microsoft Windows operating system.](https://agentprime.io/advisories/CVE-2024-3566.md)
  `CVE-2024-3566` · CVE record: Node.js Node.js and 2 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Apr 2024
- [Uncontrolled resource consumption in Node.js](https://agentprime.io/advisories/CVE-2019-5739.md)
  `CVE-2019-5739` · CVE record: Node.js Node.js · No CVSS score · Not analysed yet · Published 28 Mar 2019 · Tags: Denial of service
- [Uncontrolled resource consumption in Node.js](https://agentprime.io/advisories/CVE-2019-5737.md)
  `CVE-2019-5737` · CVE record: Node.js Node.js · No CVSS score · EPSS 0.16 · Not analysed yet · Published 28 Mar 2019 · Tags: Denial of service
- [Node.js: Node.js: All versions prior to Node.js 6.15.0, 8.14.0…](https://agentprime.io/advisories/CVE-2018-12123.md)
  `CVE-2018-12123` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 28 Nov 2018 · Tags: CWE-115
- [Uncontrolled resource consumption in Node.js](https://agentprime.io/advisories/CVE-2018-12122.md)
  `CVE-2018-12122` · CVE record: The Node.js Project Node.js · No CVSS score · EPSS 0.41 · Not analysed yet · Published 28 Nov 2018 · Tags: Denial of service
- [Uncontrolled resource consumption in Node.js](https://agentprime.io/advisories/CVE-2018-12121.md)
  `CVE-2018-12121` · CVE record: The Node.js Project Node.js · No CVSS score · EPSS 0.10 · Not analysed yet · Published 28 Nov 2018 · Tags: Denial of service
- [Node.js: Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any…](https://agentprime.io/advisories/CVE-2018-12120.md)
  `CVE-2018-12120` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 28 Nov 2018 · Tags: CWE-419
- [Node.js: Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If…](https://agentprime.io/advisories/CVE-2018-12116.md)
  `CVE-2018-12116` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 28 Nov 2018 · Tags: CWE-115
- [Node.js: In all versions of Node.js 10 prior to 10.9.0…](https://agentprime.io/advisories/CVE-2018-7166.md)
  `CVE-2018-7166` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 21 Aug 2018 · Tags: CWE-226
- [Out-of-bounds write in Node.js](https://agentprime.io/advisories/CVE-2018-12115.md)
  `CVE-2018-12115` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 21 Aug 2018 · Tags: Memory corruption
- [Node.js: Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which…](https://agentprime.io/advisories/CVE-2018-7167.md)
  `CVE-2018-7167` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 13 Jun 2018
- [Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM.](https://agentprime.io/advisories/CVE-2018-7164.md)
  `CVE-2018-7164` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 13 Jun 2018
- [All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH.](https://agentprime.io/advisories/CVE-2018-7162.md)
  `CVE-2018-7162` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 13 Jun 2018
- [All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH.](https://agentprime.io/advisories/CVE-2018-7161.md)
  `CVE-2018-7161` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 13 Jun 2018
- [Node.js: The HTTP parser in all current versions of Node.js ignores spaces in the \`Content-Length\`…](https://agentprime.io/advisories/CVE-2018-7159.md)
  `CVE-2018-7159` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 17 May 2018 · Tags: CWE-115
- [Node.js: The \`'path'\` module in the Node.js 4.x release line contains a potential regular…](https://agentprime.io/advisories/CVE-2018-7158.md)
  `CVE-2018-7158` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 17 May 2018 · Tags: CWE-185
- [Node.js: Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when…](https://agentprime.io/advisories/CVE-2017-15897.md)
  `CVE-2017-15897` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 11 Dec 2017
- [Node.js: Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of…](https://agentprime.io/advisories/CVE-2017-15896.md)
  `CVE-2017-15896` · CVE record: The Node.js Project Node.js · No CVSS score · Not analysed yet · Published 11 Dec 2017

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=node-js>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/node-js/>. Everything for agents: <https://agentprime.io/llms.txt>.