Node.js Vulnerabilities
CVE security advisories and vulnerability history for Node.js.
CVE security advisories and vulnerability history for Node.js.
Node.js has 285 published CVE records since 2012, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 59 have a known public exploit. The average CVSS base score across scored CVEs is 6.9.
A quick read on Node.js's vulnerability posture, as a share of its 285 published CVEs.
across 285 scored CVEs
168 of 285 scored
1 of 285 CVEs
59 of 285 CVEs
284 of 285 CVEs
How the CVSS severity of Node.js's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of Node.js's CVEs is confirmed exploited in the wild.
Public exploits
59
59 of Node.js's CVEs have a known public exploit available.
The Node.js products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in Node.js CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish Node.js CVE records.
How many Node.js CVEs were published each year.
The most recently disclosed vulnerabilities affecting Node.js.
CVE counts for other vendors.
Common questions about Node.js vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new Node.js CVE, with AI-written analysis and remediation steps.
Get an alert for each new Node.js CVE, with AI-written analysis and remediation steps.
Monitor Node.js CVEs