nodejs - security update

Fixed packages 1

Vulnerabilities 8

• High 8.2
  CVE-2024-27983 Public exploit EPSS 84%

  An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packet…

  Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Apr 9, 2024
• High 7.5
  CVE-2024-21892

  On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the pr…

  Node.js node openjdk17 nodejs Debian Azure Linux Alpine Wolfi
  Feb 20, 2024
• High 7.5
  CVE-2024-22019

  A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encodi…

  Node.js node nodejs nodejs Debian Azure Linux Wolfi
  Feb 20, 2024
• High 7.4
  CVE-2023-46809

  Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL wh…

  Node.js node nodejs nodejs Debian Ubuntu Wolfi
  Sep 7, 2024
• Medium 6.5
  CVE-2024-22020

  A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URL…

  Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 9, 2024
• Medium 6.5
  CVE-2024-22025

  A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack through resource exhausti…

  Node.js node nodejs nodejs Debian Ubuntu Azure Linux Wolfi
  Mar 19, 2024
• Medium 6.5
  CVE-2024-27982

  The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed…

  Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  May 7, 2024
• Medium 6.5
  CVE-2025-47153

  Certain build processes for libuv and Node.js for 32-bit systems, such as for the nodejs binary package through nodejs_…

  Debian trixie nodejs nodejs Debian Ubuntu
  May 1, 2025