The vulnerability of the Node.js software platform, related to errors in processing input data, allows a hacker to execute arbitrary commands.

The Node.js input data processing vulnerability allows remote attackers to execute arbitrary commands.

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: A vulnerability in Node.js affects IBM Rational® Application Developer for WebSphere® Software (CVE-2024-36138)	19 Aug 202416:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM SDK for Node.js affect IBM Business Automation Workflow	9 Oct 202413:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Controller is affected by vulnerabilities	15 Apr 202502:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Node.js.	13 Dec 202420:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Node.js affects IBM Rational Developer for i RPG and COBOL + Modernization Tools, Java Edition (CVE-2024-36138)	23 Sep 202420:51	–	ibm
IBM Security Bulletins	Security Bulletin: Node.js vulnerabilities affect IBM Spectrum Control	17 Sep 202408:40	–	ibm
AlpineLinux	CVE-2024-36138	7 Sep 202416:00	–	alpinelinux
Broadcom	Oracle Java SE Multiple Vulnerabilities (October 2024)	8 Jul 202500:00	–	broadcom
Broadcom	Azul Zulu Java Multiple Vulnerabilities (October 2024)	8 Jul 202500:00	–	broadcom
Chainguard	CVE-2024-36138 vulnerabilities	14 Jan 202619:17	–	cgr

Vulners

Node

node.js node.jsRange<18.20.4windows

node.js node.jsRange<20.15.1windows

node.js node.jsRange<22.4.1windows

Source	Link
nodejs	www.nodejs.org/en/blog/vulnerability/july-2024-security-releases
nodejs	www.nodejs.org/en/blog/release/v20.15.1
stackdiary	www.stackdiary.com/node-js-security-release-addresses-high-medium-vulnerabilities/
securityonline	www.securityonline.info/cve-2024-36138-high-severity-vulnerability-in-node-js-allows-code-execution-on-windows/
securityonline	www.securityonline.info/major-node-js-security-flaws-millions-of-apps-could-be-vulnerable/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.1/
web	www.web.nvd.nist.gov/view/vuln/detail

04 Mar 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 39.8

CVSS 210

EPSS0.01098