node.js vulnerabilities

CVEs per yearBy the year they were published

1. 20182
2. 20192
3. 20241

Newest CVEs

• CVE-2024-3566

  Command injection vulnerability in programing languages on Microsoft Windows operating system.

  Node.js · Node.js

  Critical9.8
• CVE-2019-5739

  Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated…

  Node.js · Node.js

  High7.5
• CVE-2019-5737

  In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by…

  Node.js · Node.js

  High7.5
• CVE-2018-1002204

  adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip…

  node.js · adm-zip

  Medium5.5
• CVE-2018-1002203

  unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip…

  node.js · unzipper

  Medium5.5