Package · Wolfi

nodejs-24

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Low 3.3

CVE-2026-106073 Public exploit

A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissi…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
Low 2.8

CVE-2025-55132

A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` e…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jan 20, 2026