nodebb vulnerabilities (npm)

14 vulnerabilities.

• nodebb npm NodeBB SQL Injection vulnerability CVE-2025-50979 EPSS 10.6% 8.6 HighAugust 27, 2025
• nodebb npm NodeBB Cross-site scripting (XSS) vulnerability CVE-2024-57041 Fix available EPSS 40.1% 4.6 MediumJanuary 24, 2025
• nodebb npm Incorrect Access Control in NodeBB CVE-2024-29316 Fix available 6.3 MediumMarch 28, 2024
• nodebb npm Unintentional leakage of private information via cross-origin websocket session hijacking CVE-2023-2850 Fix available 4.7 MediumJuly 25, 2023
• nodebb npm NodeBB vulnerable to path traversal and code execution via prototype vulnerability CVE-2023-26045 Fix available 10.0 CriticalJuly 24, 2023
• nodebb npm Account takeover via prototype vulnerability CVE-2022-46164 Public exploitFix available EPSS 47.4% 9.4 CriticalDecember 5, 2022
• nodebb npm NodeBB abort cross-site request forgery CVE-2022-3978 Fix available 4.3 MediumNovember 13, 2022
• nodebb npm Account takeover via SSO plugins in NodeBB CVE-2022-36076 Fix available 8.8 HighSeptember 2, 2022
• nodebb npm Account takeover via cryptographically weak PRNG in NodeBB Forum CVE-2022-36045 Fix available 9.0 CriticalAugust 30, 2022
• nodebb npm Path traversal in translator module of NobeBB CVE-2021-43788 Fix available EPSS 25.8% 5.0 MediumNovember 29, 2021
• nodebb npm API token verification can be bypassed CVE-2021-43786 Fix available 9.8 CriticalNovember 29, 2021
• nodebb npm XSS via prototype pollution CVE-2021-43787 Fix available 9.0 CriticalNovember 29, 2021
• nodebb npm Cross-site Scripting in NodeBB CVE-2015-9286 Fix available 6.1 MediumApril 30, 2019
• nodebb npm NodeBB Cross-site Scripting Vulnerability in Markdown Processing CVE-2015-3296 Fix available 6.1 MediumSeptember 21, 2017