Vendor

nodejs

144 known vulnerabilities.

Products

node 129 undici 15 nodejs 1

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Low 3.3

CVE-2026-106073 Public exploit

A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permissi…

nodejs node nodejs nodejs Debian Ubuntu Alpine

Oct 23, 2026
Low 3.6

CVE-2026-106071 Public exploit

A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--all…

nodejs node nodejs nodejs Ubuntu Alpine

Oct 23, 2026
Low 3.7

CVE-2026-106070 Public exploit

A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after t…

nodejs node nodejs nodejs Ubuntu Alpine

Oct 23, 2026
Low 3.7

CVE-2026-58044 Public exploit

A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild o…

nodejs node nodejs nodejs Debian Ubuntu Alpine

Aug 4, 2026
Low 3.3

CVE-2026-58039 Public exploit

A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-w…

nodejs node nodejs nodejs Debian Ubuntu Alpine

Jul 31, 2026
Low 3.3

CVE-2026-56847 Public exploit

A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside…

nodejs node nodejs nodejs Debian Ubuntu Alpine

Jul 30, 2026