How many CVEs does Node.js Node.js v24.x have?

Node.js Node.js v24.x has 1 published CVE records since 2025.

How many Node.js Node.js v24.x CVEs are in CISA KEV?

None of Node.js Node.js v24.x's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most common weakness types in Node.js Node.js v24.x CVEs?

Node.js Node.js v24.x's CVEs most often map to these CWE weakness types: CWE-407 (Inefficient Algorithmic Complexity).

What is the average severity of Node.js Node.js v24.x CVEs?

The average CVSS base score across Node.js Node.js v24.x's scored CVEs is 7.5.

Node.js v24.x Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Node.js v24.x vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Node.js v24.x Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Node.js v24.x has 1 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

Severity and exploitation

How the CVSS severity of Node.js v24.x's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Node.js v24.x's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No Node.js v24.x CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Node.js v24.x version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for Node.js v24.x; the CVEs below apply to the product without a version pin.

1 CVE

Sort

High vulnerability · 2025-07-18
CVE-2025-27209
Patch
CWE-407
High · CVSS 7.5
EPSS 1.2% (69th pct)2025-07-18

Common weakness types

The CWE weakness categories most often found in Node.js v24.x CVEs. Follow any weakness for its full explanation.

CWE-407Inefficient Algorithmic Complexity1 CVE

Other Node.js products

Browse vulnerabilities for other products by Node.js.

Node.js23 CVEs adm-zip1 CVEs node1 CVEs unzipper1 CVEs

All Node.js vulnerabilities

Frequently asked questions

Common questions about Node.js v24.x vulnerabilities.

How many CVEs does Node.js Node.js v24.x have?: Node.js Node.js v24.x has 1 published CVE records since 2025.
How many Node.js Node.js v24.x CVEs are in CISA KEV?: None of Node.js Node.js v24.x's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Node.js Node.js v24.x vulnerabilities?: No Node.js Node.js v24.x CVEs currently have a tracked public exploit in this dataset.
What are the most common weakness types in Node.js Node.js v24.x CVEs?: Node.js Node.js v24.x's CVEs most often map to these CWE weakness types: CWE-407 (Inefficient Algorithmic Complexity).
What is the average severity of Node.js Node.js v24.x CVEs?: The average CVSS base score across Node.js Node.js v24.x's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Node.js v24.x vulnerabilities

Get an alert for each new Node.js v24.x CVE, with AI-written analysis and remediation steps.

Create an account See pricing