Package · Wolfi

nodejs-22

29 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 7.4

CVE-2026-106069 Public exploit

A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP addre…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
High 7.4

CVE-2026-105482 Public exploit

A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() …

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
High 7.5

CVE-2026-58043 Public exploit

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Un…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jul 30, 2026
High 7.5

CVE-2026-21710 Public exploit EPSS 25%

A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Mar 30, 2026
High 7.1

CVE-2025-55130 Public exploit

A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions …

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jan 20, 2026