Advisories · Technology
node.
Every CVE that names node among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.4 High
Improper certificate validation in node
- node
- Weak cryptography or TLS
- CVSS 6.5 Medium
Time-of-check time-of-use race condition in node
- node
- Race condition
- CVSS 7.4 High
Improper access control in node
- node
- Broken access control
- CVSS 4.8 Medium
Insufficiently random values in node
- node
- Weak cryptography or TLS
- CVSS 3.6 Low
Improper access control in node
- node
- Broken access control
- CVSS 6.7 Medium
Improper certificate validation in node
- node
- Weak cryptography or TLS
- CVSS 7.4 High
Improper certificate validation in node
- node
- Weak cryptography or TLS
- CVSS 3.7 Low
node: A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong…
- node
- CWE-840
- CVSS 3.3 Low
Improper access control in node
- node
- Broken access control
- CVSS 3.7 Low
HTTP request smuggling in node
- node
- HTTP request smuggling
- CVSS 7.5 High
Use after free in node
- node
- Memory corruption
- CVSS 5.9 Medium
Uncontrolled resource consumption in node
- node
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in node
- node
- Denial of service
- CVSS 3.7 Low
HTTP request smuggling in node
- node
- HTTP request smuggling
- CVSS 6.2 Medium
Uncontrolled resource consumption in node
- node
- Denial of service
- CVSS 5.3 Medium
Time-of-check time-of-use race condition in node
- node
- Race condition
- CVSS 3.3 Low
Improper access control in node
- node
- Broken access control
- CVSS 3.3 Low
node: A flaw in Node.js Permission Model enforcement allows…
- node
- CWE-1119
- CVSS 7.5 High
Improper access control in node
- node
- Broken access control
- CVSS 4.1 Medium
Improper authentication in node
- node
- Authentication bypass
- CVSS 6.3 Medium
Improper certificate validation in node
- node
- Weak cryptography or TLS
- CVSS 5.6 Medium
Improper access control in node
- node
- Broken access control
- CVSS 4.2 Medium
Improper access control in node
- node
- Broken access control
- CVSS 4.3 Medium
Improper certificate validation in node
- node
- Weak cryptography or TLS
- CVSS 3.3 Low
Improper access control in node
- node
- Broken access control
- CVSS 7.7 High
node: A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling…
- node
- CWE-176
- CWE-289
- CVSS 7.5 High
Integer overflow in node
- node
- Memory corruption
- Denial of service
- CVSS 3.3 Low
Incorrect default permissions in node
- node
- Broken access control
- CVSS 5.3 Medium
Uncontrolled resource consumption in node
- node
- Denial of service
- CVSS 5.9 Medium
Exposure of personal information in node
- node
- Information disclosure
- CVSS 3.7 Low
Time-of-check time-of-use race condition in node
- node
- Race condition
- CVSS 5.3 Medium
Uncontrolled resource consumption in node
- node
- Denial of service
- CVSS 1.8 Low
Improper access control in node
- node
- Broken access control
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Resource allocation without limits in node
- node
- Denial of service
- Memory corruption
- CVSS 3.3 Low
Missing authorization in node
- node
- Broken access control
- CVSS 5.3 Medium
Improper access control in node
- node
- Broken access control
- CVSS 3.3 Low
Incorrect permission assignment in node
- node
- Broken access control
- CVSS 5.9 Medium
Weak hash in node
- node
- Weak cryptography or TLS
- CVSS 5.9 Medium
node: A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating…
- node
- CWE-208
- CVSS 5.3 Medium
Memory leak in node
- node
- Denial of service
- CVSS 5.7 Medium
Improper input validation in node
- node
- CWE-20
- CVSS 5.8 Medium
Improper access control in node
- node
- Broken access control
- CVSS 5.9 Medium
node: We have identified a bug in Node.js error handling where "Maximum call stack size…
- node
- CWE-248
- CVSS 2.8 Low
Incorrect default permissions in node
- node
- Broken access control
- CVSS 6.5 Medium
Uncontrolled resource consumption in node
- node
- Denial of service
- CVSS 7.1 High
Buffer overflow in node
- node
- Memory corruption
- Information disclosure
- CVSS 7.1 High
node: A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and…
- node
- CWE-281
- CWE-289
- CVSS 5.9 Medium
Uncontrolled resource consumption in node
- node
- Denial of service
- CVSS 7.5 High
Uncontrolled resource consumption in node
- node
- Denial of service
- CWE-248
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Path traversal in node and others
- node
- nodejs
- Path traversal
- CVSS 7.5 High
Inefficient algorithmic complexity in node
- node
- Denial of service
- CVSS 3.7 Low
Memory leak in node
- node
- Denial of service
- CVSS 7.5 High
node: The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on…
- node
- CWE-248
- CVSS 6.5 Medium
HTTP request smuggling in node
- node
- HTTP request smuggling
- CVSS 5.3 Medium
Memory leak in Node
- Node
- Denial of service
- CVSS 5.6 Medium
Path traversal in Node
- Node
- Path traversal
- CVSS 7.7 High
Improper access control in Node
- Node
- Broken access control
- CVSS 8.1 High
Command injection in Node
- Node
- Command injection
- CVSS 3.6 Low
Path traversal in Node
- Node
- Path traversal
- CVSS 7.4 High
Node: Node.js versions which bundle an unpatched version of OpenSSL or run against a…
- Node
- CWE-385