What’s Vulnerable › Products

Node.js vulnerabilities

218 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 59 published in the last 12 months.

Check whether your Node.js version is affected

Exploited Node.js vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest Node.js vulnerabilities

• CVE-2026-106074 — (CVSS 4.8)
• CVE-2026-106073 — (CVSS 3.3)
• CVE-2026-106072 — (CVSS 6.7)
• CVE-2026-106071 — (CVSS 3.6)
• CVE-2026-106070 — (CVSS 3.7)
• CVE-2026-106069 — (CVSS 7.4)
• CVE-2026-105483 — (CVSS 7.4)
• CVE-2026-105482 — (CVSS 7.4)
• CVE-2026-105481 — (CVSS 6.5)
• CVE-2026-48932 — (CVSS 3.7)
• CVE-2026-56848 — (CVSS 7.5)
• CVE-2026-58045 — (CVSS 6.2)
• CVE-2026-58044 — (CVSS 3.7)
• CVE-2026-58042 — (CVSS 5.9)
• CVE-2026-58041 — (CVSS 5.3)
• CVE-2026-56846 — (CVSS 7.5)
• CVE-2026-58039 — (CVSS 3.3)
• CVE-2026-58043 — (CVSS 8.4)
• CVE-2026-58040 — (CVSS 6.3)
• CVE-2026-56850 — (CVSS 4.4)
• CVE-2026-56847 — (CVSS 6.1)
• CVE-2026-48936 — (CVSS 3.3)
• CVE-2026-48935 — (CVSS 3.3)
• CVE-2026-48934 — (CVSS 4.3)
• CVE-2026-48933 — (CVSS 7.5)