CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5829 matches found

Oracle linux•added 2026/02/04 12:00 a.m.•23 views

nodejs22 security update

1:22.22.0-3 - Bump release to get correct RHEL build 1:22.22.0-2 - Filter for nodejs22.fmf in gating plan 1:22.22.0-1 - Update to 22.22.0 1:22.19.0-3 - Unit-tests adjustment - disable internet/test-dgram-membership...

9.1CVSS6.8AI score0.03962EPSS

SaveExploits2

Positive Technologies•added 2026/02/03 12:00 a.m.•15 views

PT-2026-6213

Name of the Vulnerable Software and Affected Versions Compressing versions 1.10.3 and prior Compressing version 2.0.0 Description Compressing, a compressing and uncompressing library for Node.js, does not validate symbolic link targets when extracting TAR archives. This allows an attacker to embe...

8.4CVSS6.1AI score0.00353EPSS

SaveExploits1References16

Photon•added 2026/02/03 12:00 a.m.•37 views

Critical Photon OS Security Update - PHSA-2026-4.0-0956

Updates of 'nodejs', 'expat' packages of Photon OS have been released...

9.1CVSS6.7AI score0.03455EPSS

SaveExploits2

osv_alsa•added 2026/02/03 12:00 a.m.•16 views

ALSA-2026:1842 Important: nodejs24 security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

9.1CVSS6.8AI score0.03962EPSS

SaveExploits2References14

osv_alsa•added 2026/02/03 12:00 a.m.•25 views

ALSA-2026:1843 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

9.1CVSS6.8AI score0.03962EPSS

SaveExploits2References14

vulnersOsv•added 2026/02/02 10:21 p.m.•5 views

@haxtheweb/create (>=0.1.3, <=26.0.0), @haxtheweb/haxcms-nodejs (>=0.0.2, <=25.0.0) +3 more potentially affected by CVE-2026-25521 via locutus (>=2.0.14, <=2.0.32)

locutus NPM version =2.0.14, =0.1.3, =0.0.2, =11.0.2, =2.1.1, =1.0.66, =1.0.72 Source cves: CVE-2026-25521 Source advisory: GHSA-RXRV-835Q-V5MH...

9.4CVSS5.8AI score0.00319EPSS

SaveExploits1