Package · Wolfi

nodejs-24-doc

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 5.9

CVE-2025-59466

We have identified a bug in Node.js error handling where "Maximum call stack size exceeded" errors become uncatchable w…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jan 20, 2026
Medium 6.5

CVE-2025-59464

A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freei…

Node.js node nodejs nodejs-20 Ubuntu Wolfi

Jan 20, 2026
Medium 5.9

CVE-2026-21637

A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCal…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jan 20, 2026
Medium 5.8

CVE-2026-21636 Public exploit

A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `-…

Node.js node nodejs nodejs-20 Ubuntu Wolfi

Jan 20, 2026