Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: NodeJS Node 10.*, 11.* and 11 more versions Clear all filters
TI-2021-05782 CVE-2021-22921 · GHSA-g3w9-g82h-cmp4

Incorrect permission assignment in NodeJS Node

Priority MEDIUM 44

Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.07409 Published 2021-07-12 Fixed in 12.22.2, 14.17.2 +1 CWE-732
TI-2021-05779 CVE-2021-22918 · GHSA-x3cj-3539-rcpx

Out-of-bounds read in NodeJS Node

Priority MEDIUM 44

Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to convert strings to ASCII.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.23132 Published 2021-07-12 Partial fix · 12.22.2, 14.17.2 +1 CWE-125