CVE-2025-23089
This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node...
CVE-2025-23089 has been rejected by its source and should not be treated as a live vulnerability, published January 22, 2025.
- Severity
- 8.8 HighCVSS 3.0, GitHub Advisories
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Affected products
Affected packages
What each source reports
GitHub Advisories Score usedGHSA-f9jc-68cv-wp63
This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node...
This CVE has been issued to inform users that they are using End-of-Life (EOL) versions of Node.js. These versions are no longer supported and do not receive updates, including security patches. The continued use of EOL versions may expose systems to potential security risks due to unaddressed software vulnerabilities or dependencies (CWE-1104: Use of Unmaintained Third-Party Components).
Users are advised to upgrade to actively supported versions of Node.js to ensure continued security updates and support.
- Record
GHSA-f9jc-68cv-wp63- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-1104
- Updated
- 2026-11-02
CVE ListNo score
This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities
- Record
CVE-2025-23089- Updated
- 2026-11-02
EUVDEUVD-2025-3117
This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities
- Record
EUVD-2025-3117- CVSS
- 0.0 None
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
NVDNo score
Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities
- Record
CVE-2025-23089- Updated
- 2026-11-02
OSVBIT-node-2025-23089No score
Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities
- Record
BIT-node-2025-23089- Updated
- 2026-11-02
OSVBIT-node-min-2025-23089No score
Rejected reason: This Record was REJECTED after determining it is not in compliance with CVE Program requirements regarding assignment for vulnerabilities
- Record
BIT-node-min-2025-23089- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.