nodejs | Snyk

Direct Vulnerabilities

Known vulnerabilities in the nodejs package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-58045	*
L CVE-2026-58044	*
L CVE-2026-58043	*
L CVE-2026-58042	*
L CVE-2026-58041	*
L CVE-2026-58040	*
L CVE-2026-58039	*
L CVE-2026-56850	*
L CVE-2026-56848	*
L CVE-2026-56847	*
L CVE-2026-56846	*
L CVE-2026-48937	*
L CVE-2026-48935	*
L CVE-2026-48934	*
L CVE-2026-48933	*
L CVE-2026-48931	*
L CVE-2026-48930	*
L CVE-2026-48928	*
L CVE-2026-48619	*
M CVE-2026-48618	*
L CVE-2026-48617	*
L CVE-2026-48615	*
L CVE-2026-21717	<20.19.2+dfsg-1+deb13u2
L CVE-2026-21714	<18.20.4+dfsg-1~deb12u2
L CVE-2026-21713	<18.20.4+dfsg-1~deb12u2
L CVE-2026-21710	<18.20.4+dfsg-1~deb12u2
H CVE-2026-21637	<18.20.4+dfsg-1~deb12u2
H CVE-2025-59466	<18.20.4+dfsg-1~deb12u2
L CVE-2025-59465	<18.20.4+dfsg-1~deb12u2
L CVE-2025-55131	<18.20.4+dfsg-1~deb12u2
L CVE-2025-47153	<1
L CVE-2025-23166	<18.20.4+dfsg-1~deb12u1
L CVE-2025-23165	<18.20.4+dfsg-1~deb12u1
L CVE-2025-23085	<18.20.4+dfsg-1~deb12u2
L CVE-2025-23083	<18.20.6
L CVE-2024-27983	<18.20.1
L CVE-2024-27982	<18.20.1
L CVE-2024-22025	<18.19.1
L CVE-2024-22020	<18.20.4
H CVE-2024-22019	<18.19.1
H Arbitrary Code Injection	<18.19.1
L CVE-2023-46809	<18.19.1
L CVE-2023-39333	<18.19.0+dfsg-6~deb12u1
H Insufficient Verification of Data Authenticity	<18.19.0+dfsg-6~deb12u1
H CVE-2023-32559	<18.19.0+dfsg-6~deb12u1
H CVE-2023-32006	<18.19.0+dfsg-6~deb12u1
C CVE-2023-32002	<18.19.0+dfsg-6~deb12u1
H CVE-2023-30590	<18.19.0+dfsg-6~deb12u1
H CVE-2023-30589	<18.19.0+dfsg-6~deb12u1
M CVE-2023-30588	<18.19.0+dfsg-6~deb12u1
H CVE-2023-30581	<18.19.0+dfsg-6~deb12u1
M Untrusted Search Path	<18.19.0+dfsg-6~deb12u1
H CVE-2023-23919	<18.19.0+dfsg-6~deb12u1
H Incorrect Authorization	<18.19.0+dfsg-6~deb12u1
H OS Command Injection	<18.12.1+dfsg-1
M HTTP Request Smuggling	<18.10.0+dfsg-1
C Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	<18.10.0+dfsg-1
M HTTP Request Smuggling	<18.6.0+dfsg-3
M HTTP Request Smuggling	<18.6.0+dfsg-3
M HTTP Request Smuggling	<18.6.0+dfsg-3
H OS Command Injection	<18.6.0+dfsg-3
H Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<12.22.9~dfsg-1
M Improper Certificate Validation	<12.22.9~dfsg-1
M Improper Certificate Validation	<12.22.9~dfsg-1
H Improper Certificate Validation	<12.22.9~dfsg-1
M HTTP Request Smuggling	<12.22.7~dfsg-1
M HTTP Request Smuggling	<12.22.7~dfsg-1
H Use After Free	<12.22.5~dfsg-1
M Improper Certificate Validation	<12.22.5~dfsg-1
C Use After Free	<12.22.4~dfsg-1
H CVE-2021-22884	<12.21.0~dfsg-1
H Missing Release of Resource after Effective Lifetime	<12.21.0~dfsg-1
H Improper Enforcement of Message or Data Structure	<10.21.0~dfsg-1
C CVE-2019-15606	<10.19.0~dfsg-1
C HTTP Request Smuggling	<10.19.0~dfsg-1
H Improper Certificate Validation	<10.19.0~dfsg-1
M Improper Input Validation	<10.15.0~dfsg-6
H Resource Exhaustion	<10.15.0~dfsg-6
H Resource Exhaustion	<10.15.0~dfsg-6
H Inclusion of Functionality from Untrusted Control Sphere	<8.9.3~dfsg-5
H CVE-2018-12116	<10.15.0~dfsg-6
H Out-of-bounds Write	<10.15.0~dfsg-6
H Improper Input Validation	<4.8.4~dfsg-1
M HTTP Request Smuggling	<12.20.1~dfsg-1
H Use After Free	<12.20.1~dfsg-1
H HTTP Request Smuggling	<12.18.4~dfsg-1
H Integer Underflow	<10.21.0~dfsg-1
H Allocation of Resources Without Limits or Throttling	<10.16.3~dfsg-1
H CVE-2019-9513	<10.16.3~dfsg-1
H Allocation of Resources Without Limits or Throttling	<10.16.3~dfsg-1
H Allocation of Resources Without Limits or Throttling	<8.9.3~dfsg-5
H Allocation of Resources Without Limits or Throttling	<10.15.2~dfsg-1
H Out-of-Bounds	<10.15.0~dfsg-6
H Resource Exhaustion	<10.15.0~dfsg-6
H Improper Input Validation	<10.15.0~dfsg-6
H Improper Input Validation	<10.15.0~dfsg-6
H Authentication Bypass	<8.11.1~dfsg-2
M Improper Input Validation	<8.11.1~dfsg-2
H CVE-2018-7158	<6.0.0~dfsg-1
M Improper Data Handling	<4.6.0~dfsg-1
M HTTP Response Splitting	<4.6.0~dfsg-1
H Improper Input Validation	<4.3.0~dfsg-1
H Improper Input Validation	<4.3.0~dfsg-1
H Out-of-Bounds	<4.4.6~dfsg-1
H Code	<4.2.3~dfsg-1
H Resource Exhaustion	<4.1.1~dfsg-3
C Out-of-Bounds	<4.2.3~dfsg-1
H Race Condition	<4.0.0~dfsg-1
M Out-of-Bounds	<0.10.38~dfsg-1
M Improper Input Validation	<0.10.21~dfsg1-1
M Improper Input Validation	<0.6.17~dfsg1-1

Vulnerability

Vulnerable Version

CVE-2026-58045