Package · Wolfi

nodejs-26

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Low 3.3

CVE-2026-106073 Public exploit

A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissi…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
Low 3.6

CVE-2026-106071 Public exploit

A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--all…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
Low 3.7

CVE-2026-106070 Public exploit

A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after t…

Node.js node nodejs nodejs Ubuntu Alpine Wolfi

Oct 23, 2026