N
Vendor security profile
node
Node.js is a cross-platform, open-source JavaScript runtime environment that can run on Windows, Linux, Unix, macOS, and more. Node.js runs on the V8 JavaScript engine, and executes JavaScript code outside a web browser. · Wikipedia
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs155
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
155toplam CVE
Uncertain155 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
155Unknown
Latest vulnerabilities
7.4
CVE-2026-106069Improper certificate validation in Node.js
Partial patch Public Exploits:3EPSS %0
6.5
CVE-2026-105481Vulnerability in Node.js
Partial patch Public Exploits:3EPSS %0
7.4
CVE-2026-105482Improper access control in Node.js
Partial patch Public Exploits:6EPSS %0
4.8
CVE-2026-106074Vulnerability in Node.js
Partial patch Public Exploits:3EPSS %0
3.6
CVE-2026-106071Improper access control in Node.js
Partial patch Public Exploits:3EPSS %0
6.7
CVE-2026-106072Improper certificate validation in Node.js
Partial patch Public Exploits:3EPSS %1
7.4
CVE-2026-105483Improper certificate validation in Node.js
Partial patch Public Exploits:3EPSS %0
3.7
CVE-2026-106070Vulnerability in Node.js
Patch status unknown Public Exploits:3EPSS %0
3.3
CVE-2026-106073Improper access control in Node.js
Partial patch Public Exploits:4EPSS %0
9.2
CVE-2026-111497 Actively exploitedOut-of-Bounds Write in Google Brotli Decoder
Patch verified Public Exploits:21EPSS %83