# node. Every CVE that names node among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Improper certificate validation in node](https://agentprime.io/advisories/CVE-2026-106069.md) `CVE-2026-106069` · CVE record: nodejs node · CVSS 7.4 High · Not analysed yet · Published 23 Oct 2026 · Tags: Weak cryptography or TLS - [Time-of-check time-of-use race condition in node](https://agentprime.io/advisories/CVE-2026-105481.md) `CVE-2026-105481` · CVE record: nodejs node · CVSS 6.5 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Race condition - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-105482.md) `CVE-2026-105482` · CVE record: nodejs node · CVSS 7.4 High · Not analysed yet · Published 23 Oct 2026 · Tags: Broken access control - [Insufficiently random values in node](https://agentprime.io/advisories/CVE-2026-106074.md) `CVE-2026-106074` · CVE record: nodejs node · CVSS 4.8 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Weak cryptography or TLS - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-106071.md) `CVE-2026-106071` · CVE record: nodejs node · CVSS 3.6 Low · Not analysed yet · Published 23 Oct 2026 · Tags: Broken access control - [Improper certificate validation in node](https://agentprime.io/advisories/CVE-2026-106072.md) `CVE-2026-106072` · CVE record: nodejs node · CVSS 6.7 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in node](https://agentprime.io/advisories/CVE-2026-105483.md) `CVE-2026-105483` · CVE record: nodejs node · CVSS 7.4 High · Not analysed yet · Published 23 Oct 2026 · Tags: Weak cryptography or TLS - [node: A flaw in the Node.js \`zlib.ZipFile\` API can cause it to return bytes that do not belong…](https://agentprime.io/advisories/CVE-2026-106070.md) `CVE-2026-106070` · CVE record: nodejs node · CVSS 3.7 Low · Not analysed yet · Published 23 Oct 2026 · Tags: CWE-840 - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-106073.md) `CVE-2026-106073` · CVE record: nodejs node · CVSS 3.3 Low · Not analysed yet · Published 23 Oct 2026 · Tags: Broken access control - [HTTP request smuggling in node](https://agentprime.io/advisories/CVE-2026-48932.md) `CVE-2026-48932` · CVE record: nodejs node · CVSS 3.7 Low · Not analysed yet · Published 1 Sept 2026 · Tags: HTTP request smuggling - [Use after free in node](https://agentprime.io/advisories/CVE-2026-56848.md) `CVE-2026-56848` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2026 · Tags: Memory corruption - [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2026-58042.md) `CVE-2026-58042` · CVE record: nodejs node · CVSS 5.9 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Denial of service - [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2026-56846.md) `CVE-2026-56846` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2026 · Tags: Denial of service - [HTTP request smuggling in node](https://agentprime.io/advisories/CVE-2026-58044.md) `CVE-2026-58044` · CVE record: nodejs node · CVSS 3.7 Low · Not analysed yet · Published 4 Aug 2026 · Tags: HTTP request smuggling - [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2026-58045.md) `CVE-2026-58045` · CVE record: nodejs node · CVSS 6.2 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Denial of service - [Time-of-check time-of-use race condition in node](https://agentprime.io/advisories/CVE-2026-58041.md) `CVE-2026-58041` · CVE record: nodejs node · CVSS 5.3 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Race condition - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-58039.md) `CVE-2026-58039` · CVE record: nodejs node · CVSS 3.3 Low · Not analysed yet · Published 31 Jul 2026 · Tags: Broken access control - [node: A flaw in Node.js Permission Model enforcement allows…](https://agentprime.io/advisories/CVE-2026-56847.md) `CVE-2026-56847` · CVE record: nodejs node · CVSS 3.3 Low · Not analysed yet · Published 30 Jul 2026 · Tags: CWE-1119 - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-58043.md) `CVE-2026-58043` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Broken access control - [Improper authentication in node](https://agentprime.io/advisories/CVE-2026-56850.md) `CVE-2026-56850` · CVE record: nodejs node · CVSS 4.1 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Authentication bypass - [Improper certificate validation in node](https://agentprime.io/advisories/CVE-2026-58040.md) `CVE-2026-58040` · CVE record: nodejs node · CVSS 6.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Weak cryptography or TLS - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-48930.md) `CVE-2026-48930` · CVE record: nodejs node · CVSS 5.6 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-48928.md) `CVE-2026-48928` · CVE record: nodejs node · CVSS 4.2 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [Improper certificate validation in node](https://agentprime.io/advisories/CVE-2026-48934.md) `CVE-2026-48934` · CVE record: nodejs node · CVSS 4.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Weak cryptography or TLS - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-48936.md) `CVE-2026-48936` · CVE record: nodejs node · CVSS 3.3 Low · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [node: A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling…](https://agentprime.io/advisories/CVE-2026-48618.md) `CVE-2026-48618` · CVE record: nodejs node · CVSS 7.7 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-176, CWE-289 - [Integer overflow in node](https://agentprime.io/advisories/CVE-2026-48933.md) `CVE-2026-48933` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Memory corruption, Denial of service - [Incorrect default permissions in node](https://agentprime.io/advisories/CVE-2026-48935.md) `CVE-2026-48935` · CVE record: nodejs node · CVSS 3.3 Low · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control - [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2026-48619.md) `CVE-2026-48619` · CVE record: nodejs node · CVSS 5.3 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Denial of service - [Exposure of personal information in node](https://agentprime.io/advisories/CVE-2026-48615.md) `CVE-2026-48615` · CVE record: nodejs node · CVSS 5.9 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Information disclosure - [Time-of-check time-of-use race condition in node](https://agentprime.io/advisories/CVE-2026-48931.md) `CVE-2026-48931` · CVE record: nodejs node · CVSS 3.7 Low · Not analysed yet · Published 22 Jun 2026 · Tags: Race condition - [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2026-48937.md) `CVE-2026-48937` · CVE record: nodejs node · CVSS 5.3 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Denial of service - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-48617.md) `CVE-2026-48617` · CVE record: nodejs node · CVSS 1.8 Low · Not analysed yet · Published 18 Jun 2026 · Tags: Broken access control - [Resource allocation without limits in node](https://agentprime.io/advisories/CVE-2026-21710.md) `CVE-2026-21710` · CVE record: nodejs node · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.25 · Not analysed yet · Published 30 Mar 2026 · Tags: Denial of service, Memory corruption - [Missing authorization in node](https://agentprime.io/advisories/CVE-2026-21716.md) `CVE-2026-21716` · CVE record: nodejs node · CVSS 3.3 Low · Not analysed yet · Published 30 Mar 2026 · Tags: Broken access control - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-21711.md) `CVE-2026-21711` · CVE record: nodejs node · CVSS 5.3 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Broken access control - [Incorrect permission assignment in node](https://agentprime.io/advisories/CVE-2026-21715.md) `CVE-2026-21715` · CVE record: nodejs node · CVSS 3.3 Low · Not analysed yet · Published 30 Mar 2026 · Tags: Broken access control - [Weak hash in node](https://agentprime.io/advisories/CVE-2026-21717.md) `CVE-2026-21717` · CVE record: nodejs node · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Weak cryptography or TLS - [node: A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating…](https://agentprime.io/advisories/CVE-2026-21713.md) `CVE-2026-21713` · CVE record: nodejs node · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-208 - [Memory leak in node](https://agentprime.io/advisories/CVE-2026-21714.md) `CVE-2026-21714` · CVE record: nodejs node · CVSS 5.3 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Denial of service - [Improper input validation in node](https://agentprime.io/advisories/CVE-2026-21712.md) `CVE-2026-21712` · CVE record: nodejs node · CVSS 5.7 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: CWE-20 - [Improper access control in node](https://agentprime.io/advisories/CVE-2026-21636.md) `CVE-2026-21636` · CVE record: nodejs node · CVSS 5.8 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: Broken access control - [node: We have identified a bug in Node.js error handling where "Maximum call stack size…](https://agentprime.io/advisories/CVE-2025-59466.md) `CVE-2025-59466` · CVE record: nodejs node · CVSS 5.9 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-248 - [Incorrect default permissions in node](https://agentprime.io/advisories/CVE-2025-55132.md) `CVE-2025-55132` · CVE record: nodejs node · CVSS 2.8 Low · Not analysed yet · Published 20 Jan 2026 · Tags: Broken access control - [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2025-59464.md) `CVE-2025-59464` · CVE record: nodejs node · CVSS 6.5 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: Denial of service - [Buffer overflow in node](https://agentprime.io/advisories/CVE-2025-55131.md) `CVE-2025-55131` · CVE record: nodejs node · CVSS 7.1 High · Not analysed yet · Published 20 Jan 2026 · Tags: Memory corruption, Information disclosure - [node: A flaw in Node.js’s Permissions model allows attackers to bypass \`--allow-fs-read\` and…](https://agentprime.io/advisories/CVE-2025-55130.md) `CVE-2025-55130` · CVE record: nodejs node · CVSS 7.1 High · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-281, CWE-289 - [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2026-21637.md) `CVE-2026-21637` · CVE record: nodejs node · CVSS 5.9 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: Denial of service - [Uncontrolled resource consumption in node](https://agentprime.io/advisories/CVE-2025-59465.md) `CVE-2025-59465` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 20 Jan 2026 · Tags: Denial of service, CWE-248 - [Path traversal in node and others](https://agentprime.io/advisories/CVE-2025-27210.md) `CVE-2025-27210` · CVE record: nodejs node and 1 more · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.14 · Not analysed yet · Published 18 Jul 2025 · Tags: Path traversal - [Inefficient algorithmic complexity in node](https://agentprime.io/advisories/CVE-2025-27209.md) `CVE-2025-27209` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 18 Jul 2025 · Tags: Denial of service - [Memory leak in node](https://agentprime.io/advisories/CVE-2025-23165.md) `CVE-2025-23165` · CVE record: nodejs node · CVSS 3.7 Low · Not analysed yet · Published 19 May 2025 · Tags: Denial of service - [node: The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on…](https://agentprime.io/advisories/CVE-2025-23166.md) `CVE-2025-23166` · CVE record: nodejs node · CVSS 7.5 High · Not analysed yet · Published 19 May 2025 · Tags: CWE-248 - [HTTP request smuggling in node](https://agentprime.io/advisories/CVE-2025-23167.md) `CVE-2025-23167` · CVE record: nodejs node · CVSS 6.5 Medium · Not analysed yet · Published 19 May 2025 · Tags: HTTP request smuggling - [Memory leak in Node](https://agentprime.io/advisories/CVE-2025-23085.md) `CVE-2025-23085` · CVE record: NodeJS Node · CVSS 5.3 Medium · Not analysed yet · Published 7 Feb 2025 · Tags: Denial of service - [Path traversal in Node](https://agentprime.io/advisories/CVE-2025-23084.md) `CVE-2025-23084` · CVE record: NodeJS Node · CVSS 5.6 Medium · Not analysed yet · Published 28 Jan 2025 · Tags: Path traversal - [Improper access control in Node](https://agentprime.io/advisories/CVE-2025-23083.md) `CVE-2025-23083` · CVE record: NodeJS Node · CVSS 7.7 High · Not analysed yet · Published 22 Jan 2025 · Tags: Broken access control - [Command injection in Node](https://agentprime.io/advisories/CVE-2024-27980.md) `CVE-2024-27980` · CVE record: NodeJS Node · CVSS 8.1 High · Not analysed yet · Published 9 Jan 2025 · Tags: Command injection - [Path traversal in Node](https://agentprime.io/advisories/CVE-2024-37372.md) `CVE-2024-37372` · CVE record: NodeJS Node · CVSS 3.6 Low · Not analysed yet · Published 9 Jan 2025 · Tags: Path traversal - [Node: Node.js versions which bundle an unpatched version of OpenSSL or run against a…](https://agentprime.io/advisories/CVE-2023-46809.md) `CVE-2023-46809` · CVE record: NodeJS Node · CVSS 7.4 High · Not analysed yet · Published 7 Sept 2024 · Tags: CWE-385 Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .