Homepage

nodejs:24/nodejs

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the nodejs:24/nodejs package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Reachable Assertion

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
HTTP Request Smuggling

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Resource Exhaustion

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Time-of-check Time-of-use (TOCTOU)

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Key Exchange without Entity Authentication

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
External Control of File Name or Path

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Incorrect Implementation of Authentication Algorithm

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Improper Access Control

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Resource Exhaustion

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Time-of-check Time-of-use (TOCTOU)

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
External Control of File Name or Path

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Reachable Assertion

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
HTTP Request Smuggling

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Resource Exhaustion

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Time-of-check Time-of-use (TOCTOU)

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Key Exchange without Entity Authentication

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
External Control of File Name or Path

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Incorrect Implementation of Authentication Algorithm

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Improper Access Control

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Resource Exhaustion

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Time-of-check Time-of-use (TOCTOU)

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
External Control of File Name or Path

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Origin Validation Error

<1:24.21.0-1.module+el9.8.0+24924+cd677006
  • H
Improper Certificate Validation

<1:24.21.0-1.module+el9.8.0+24924+cd677006
  • H
NULL Pointer Dereference

<1:24.21.0-1.module+el9.8.0+24924+cd677006
  • H
Origin Validation Error

<1:24.21.0-1.module+el9.8.0+24924+cd677006
  • H
Improper Certificate Validation

<1:24.21.0-1.module+el9.8.0+24924+cd677006
  • H
NULL Pointer Dereference

<1:24.21.0-1.module+el9.8.0+24924+cd677006
  • H
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Expired Pointer Dereference

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Resource Exhaustion

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Expired Pointer Dereference

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
Resource Exhaustion

<1:24.19.0-1.module+el9.8.0+24708+e71d2e1d
  • H
CVE-2026-69192

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Server-Side Request Forgery (SSRF)

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Integer Underflow

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Out-of-bounds Read

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
CVE-2026-69192

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Server-Side Request Forgery (SSRF)

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Integer Underflow

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Out-of-bounds Read

<1:24.18.0-6.module+el9.8.0+24638+75f46aee
  • H
Unchecked Input for Loop Condition

<1:24.18.0-3.module+el9.8.0+24537+83ec84e1
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-3.module+el9.8.0+24537+83ec84e1
  • H
Inefficient Regular Expression Complexity

<1:24.18.0-3.module+el9.8.0+24537+83ec84e1
  • H
Unchecked Input for Loop Condition

<1:24.18.0-3.module+el9.8.0+24537+83ec84e1
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-3.module+el9.8.0+24537+83ec84e1
  • H
Inefficient Regular Expression Complexity

<1:24.18.0-3.module+el9.8.0+24537+83ec84e1
  • M
HTTP Request Smuggling

*
  • H
Allocation of Resources Without Limits or Throttling

*
  • M
Access of Resource Using Incompatible Type ('Type Confusion')

*
  • H
Unchecked Input for Loop Condition

*
  • M
Improper Null Termination

*
  • M
Misinterpretation of Input

*
  • H
Improper Certificate Validation

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Validation of Syntactic Correctness of Input

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Verification of Source of a Communication Channel

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Verification of Source of a Communication Channel

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Incorrect Execution-Assigned Permissions

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Certificate Validation

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Null Termination

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Authentication Bypass

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Authentication Bypass

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Information Exposure

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Cross-site Scripting (XSS)

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Validation of Syntactic Correctness of Input

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Certificate Validation

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Validation of Syntactic Correctness of Input

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Verification of Source of a Communication Channel

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Verification of Source of a Communication Channel

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Incorrect Execution-Assigned Permissions

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Certificate Validation

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Null Termination

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Authentication Bypass

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Authentication Bypass

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Information Exposure

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Cross-site Scripting (XSS)

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Validation of Syntactic Correctness of Input

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Inefficient Regular Expression Complexity

*
  • H
Authentication Bypass

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Information Exposure

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • L
Incorrect Use of Privileged APIs

*
  • H
Incorrect Execution-Assigned Permissions

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Null Termination

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Authentication Bypass

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Certificate Validation

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Validation of Syntactic Correctness of Input

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • M
CRLF Injection

*
  • H
Improper Verification of Source of a Communication Channel

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Certificate Validation

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Verification of Source of a Communication Channel

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Validation of Syntactic Correctness of Input

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Allocation of Resources Without Limits or Throttling

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • M
Allocation of Resources Without Limits or Throttling

*
  • H
Cross-site Scripting (XSS)

<1:24.18.0-1.module+el9.8.0+24456+b244c3b4
  • H
Improper Verification of Source of a Communication Channel

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Reachable Assertion

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Inefficient Regular Expression Complexity

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Allocation of Resources Without Limits or Throttling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Reversible One-Way Hash

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Incorrect Execution-Assigned Permissions

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Direct Request ('Forced Browsing')

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Missing Release of Resource after Effective Lifetime

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Information Exposure

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Handling of Inconsistent Special Elements

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Verification of Source of a Communication Channel

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
CRLF Injection

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Allocation of Resources Without Limits or Throttling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
HTTP Request Smuggling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Reachable Assertion

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Inefficient Regular Expression Complexity

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Allocation of Resources Without Limits or Throttling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Reversible One-Way Hash

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Incorrect Execution-Assigned Permissions

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Direct Request ('Forced Browsing')

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Missing Release of Resource after Effective Lifetime

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Information Exposure

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Handling of Inconsistent Special Elements

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Verification of Source of a Communication Channel

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
CRLF Injection

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Allocation of Resources Without Limits or Throttling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
HTTP Request Smuggling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Reversible One-Way Hash

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Incorrect Execution-Assigned Permissions

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Missing Release of Resource after Effective Lifetime

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Direct Request ('Forced Browsing')

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Information Exposure

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Handling of Inconsistent Special Elements

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • M
Unchecked Input for Loop Condition

*
  • M
Inefficient Regular Expression Complexity

*
  • M
Executable Regular Expression Error

*
  • H
Reachable Assertion

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • M
Inefficient Regular Expression Complexity

*
  • H
Inefficient Regular Expression Complexity

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • M
Inefficient Regular Expression Complexity

*
  • L
Loop with Unreachable Exit Condition ('Infinite Loop')

*
  • H
Allocation of Resources Without Limits or Throttling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Handling of Highly Compressed Data (Data Amplification)

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Allocation of Resources Without Limits or Throttling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
CRLF Injection

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
HTTP Request Smuggling

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • L
Use of Uninitialized Resource

*
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Allocation of Resources Without Limits or Throttling

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Uncaught Exception

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Improper Preservation of Permissions

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Exposure of System Data to an Unauthorized Control Sphere

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Improper Preservation of Permissions

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Allocation of Resources Without Limits or Throttling

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Uncaught Exception

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Improper Preservation of Permissions

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Exposure of System Data to an Unauthorized Control Sphere

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Improper Preservation of Permissions

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Exposure of System Data to an Unauthorized Control Sphere

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Uncaught Exception

<1:24.14.1-2.module+el9.7.0+24166+51c9666b
  • H
Improper Preservation of Permissions

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Improper Preservation of Permissions

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Allocation of Resources Without Limits or Throttling

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • H
Uncaught Exception

<1:24.13.0-1.module+el9.7.0+23894+c8377628
  • M
Time-of-check Time-of-use (TOCTOU)

*
  • L
Allocation of Resources Without Limits or Throttling

*
  • M
Use After Free

*
  • L
OS Command Injection

*