Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: nodejs node 10.*, 11.* and 13 more versions Clear all filters
TI-2025-34815 CVE-2025-55131 · GHSA-9jwr-p39p-hwg2

Buffer overflow in NodeJS node

Priority LOW 39

A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.03455 Published 2026-01-20 Fixed CWE-120
TI-2026-17429 CVE-2026-21637 · GHSA-ggxc-26fx-987r

Uncontrolled resource consumption in NodeJS node

Priority MEDIUM 41

A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01119 Published 2026-01-20 Fixed CWE-400
TI-2025-37010 CVE-2025-59465 · GHSA-w2pg-hw7v-f7m9

Uncontrolled resource consumption in NodeJS node

Priority MEDIUM 46

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03962 Published 2026-01-20 Fixed CWE-400