Skip to contentNodejs Node.js vulnerabilities
- nodejs node.jsModerate severity vulnerability that affects validatorCVE-2013-7453Fix available6.1 Medium
- nodejs node.jsModerate severity vulnerability that affects validatorCVE-2013-7452Fix available6.1 Medium
- nodejs node.jsModerate severity vulnerability that affects validatorCVE-2013-7451Fix available6.1 Medium
- zlib, apple iphone os, mac os x +21 more +23 moreThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...CVE-2016-9843Fix available9.8 Critical
- zlib, apple iphone os, mac os x +17 more +19 moreThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...CVE-2016-9842Fix available8.8 High
- zlib, apple iphone os, mac os x +37 more +39 moreinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9841Fix available9.8 Critical
- zlib, apple iphone os, mac os x +18 more +20 moreinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...CVE-2016-9840Fix available8.8 High
- openssl, nodejs node.js +1 moreThere is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in...CVE-2016-7055Fix availableEPSS 14.2%5.9 Medium
- nodejs node.js, suse linux enterprise +1 moreThe tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x...CVE-2016-7099Fix available5.9 Medium
- nodejs node.js, suse linux enterprise +1 moreCRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0...CVE-2016-5325Fix available6.1 Medium
- c-ares, canonical ubuntu linux, debian linux +1 more +3 moreHeap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows...CVE-2016-5180Public exploitFix available9.8 Critical
- openssl, nodejs node.js, novell suse linux enterprise module for web scripting +2 morecrypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service ...CVE-2016-7052Fix availableEPSS 29.5%7.5 High
- openssl, nodejs node.js, novell suse linux enterprise module for web scripting +2 moreMultiple memory leaks in t1_lib.c in OpenSSL before 1.0.1u, 1.0.2 before 1.0.2i, and 1.1.0 before...CVE-2016-6304Fix availableEPSS 63.0%7.5 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 moreThe certificate parser in OpenSSL before 1.0.1u and 1.0.2 before 1.0.2i might allow remote...CVE-2016-6306Fix availableEPSS 41.7%5.9 Medium
- openssl, nodejs node.js +1 moreInteger overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0...CVE-2016-6303Fix availableEPSS 32.0%9.8 Critical
- google chrome, debian linux, nodejs node.js +2 moreThe parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which...CVE-2016-5172Fix available6.5 Medium
- cisco content security management appliance, nodejs node.js, openssl +6 more +8 moreThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...CVE-2016-2183Public exploitFix availableEPSS 94.7%7.5 High
- nodejs node.js, npmjs npm, ibm sdk +2 morenpm Token Leak in npmCVE-2016-3956Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +3 more +5 moreThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...CVE-2016-2178Fix available5.5 Medium
- google chrome, v8, canonical ubuntu linux +3 more +5 moreThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...CVE-2016-1669Fix available8.8 High
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...CVE-2016-2107Public exploitFix availableEPSS 89.1%5.9 Medium
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...CVE-2016-2105Fix availableEPSS 39.6%7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreMultiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote...CVE-2016-0797Fix availableEPSS 27.0%7.5 High
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreThe MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s...CVE-2016-0702Public exploitFix available5.1 Medium
- nodejs node.js, fedoraproject fedora +1 moreThe HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x...CVE-2016-2216Fix available7.5 High
- nodejs node.js, fedoraproject fedora +1 moreNode.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0...CVE-2016-2086Fix available7.5 High
- nodejs node.jsNode.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the...CVE-2015-8027Fix available7.5 High
- google chrome, debian linux, nodejs node.js +2 moreThe BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier...CVE-2015-6764Fix available9.8 Critical
- openssl, canonical ubuntu linux, debian linux +1 more +3 morecrypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote...CVE-2015-3194Public exploitFix availableEPSS 44.0%7.5 High
- openssl, canonical ubuntu linux, nodejs node.js +2 moreThe Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1...CVE-2015-3193Fix availableEPSS 25.1%7.5 High
- google v8, iojs io.js, nodejs node.js +2 moreThe Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node...CVE-2015-53807.5 High
- libuv project libuv, fedoraproject fedora, nodejs node.js +2 morelibuv before 0.10.34 does not properly drop group privileges, which allows context-dependent...CVE-2015-0278Fix available10.0 High
- nodejs node.jsDenial-of-Service Memory Exhaustion in qsCVE-2014-7191Fix available5.0 Medium
- google chrome, v8, debian linux +1 more +3 moreMultiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome...CVE-2013-6668Public exploitFix available7.5 High
- google chrome, debian linux, nodejs node.js +1 more +3 moreGoogle V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a...CVE-2013-2882Fix available7.5 High
- openssl, fedoraproject fedora, filezilla-project filezilla server +13 more +15 moreOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...CVE-2014-0224Public exploitFix availableEPSS 95.3%7.4 High
- nodejs node, node.js +1 moreA flaw in Node.js URL processing causes an assertion failure in native code when `url.format()`...CVE-2026-21712Fix available5.7 Medium
- nodejs node, node.js +1 moreA memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields...CVE-2025-59464Fix available6.5 Medium