Package · Wolfi

nodejs-24

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 6.7

CVE-2026-106072 Public exploit

A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint whe…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
Medium 4.8

CVE-2026-106074 Public exploit

A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, a…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
Medium 6.5

CVE-2026-105481 Public exploit

A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
Medium 4.1

CVE-2026-56850 Public exploit

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) cl…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jul 30, 2026
Medium 5.8

CVE-2026-21636 Public exploit

A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `-…

Node.js node nodejs nodejs-20 Ubuntu Wolfi

Jan 20, 2026