Package · Wolfi

nodejs-24-doc

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.1

CVE-2025-55130 Public exploit

A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions …

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jan 20, 2026
High 7.1

CVE-2025-55131

A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when usin…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jan 20, 2026
High 7.5

CVE-2025-59465

A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unh…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jan 20, 2026