CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4389 matches found

Tenable Nessus•added 2026/02/05 12:0 a.m.•3 views

Oracle Linux 10 : nodejs22 (ELSA-2026-1843)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1843 advisory. 1:22.22.0-3 - Bump release to get correct RHEL build 1:22.22.0-2 - Filter for nodejs22.fmf in gating plan 1:22.22.0-1 - Update to 22.22.0 1:22.19.0-3 ...

9.1CVSS6.9AI score0.01056EPSS

Exploits2References7

ATTACKERKB•added 2026/02/04 9:51 p.m.•8 views

CVE-2026-25547

@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service DoS issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, t...

9.2CVSS5.3AI score0.00481EPSS

Exploits0References2Affected Software1

Oracle linux•added 2026/02/04 12:0 a.m.•4 views

nodejs22 security update

1:22.22.0-3 - Bump release to get correct RHEL build 1:22.22.0-2 - Filter for nodejs22.fmf in gating plan 1:22.22.0-1 - Update to 22.22.0 1:22.19.0-3 - Unit-tests adjustment - disable internet/test-dgram-membership...

9.1CVSS6.6AI score0.01056EPSS

Exploits2

Positive Technologies•added 2026/02/03 12:0 a.m.•4 views

PT-2026-6213

Name of the Vulnerable Software and Affected Versions Compressing versions 1.10.3 and prior Compressing version 2.0.0 Description Compressing, a compressing and uncompressing library for Node.js, does not validate symbolic link targets when extracting TAR archives. This allows an attacker to embe...

8.4CVSS5.7AI score0.00334EPSS

Exploits1References16

OSV•added 2026/02/03 12:0 a.m.•4 views

ALSA-2026:1842 Important: nodejs24 security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

9.1CVSS5.6AI score0.01056EPSS

Exploits2References14

OSV•added 2026/02/03 12:0 a.m.•5 views

ALSA-2026:1843 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

9.1CVSS5.6AI score0.01056EPSS

Exploits2References14

Photon•added 2026/02/03 12:0 a.m.•7 views

Critical Photon OS Security Update - PHSA-2026-4.0-0956

Updates of 'nodejs', 'expat' packages of Photon OS have been released...

9.1CVSS6.8AI score0.01056EPSS

Exploits2

vulnersOsv•added 2026/02/02 10:21 p.m.•5 views

@haxtheweb/create (>=0.1.3 <=26.0.0), @haxtheweb/haxcms-nodejs (>=0.0.2 <=25.0.0) +3 more potentially affected by CVE-2026-25521 via locutus (>=2.0.14 <=2.0.32)

locutus NPM version =2.0.14, =0.1.3, =0.0.2, =11.0.2, =2.1.1, =1.0.66, =1.0.72 Source cves: CVE-2026-25521 Source advisory: SNYK:JS-LOCUTUS-15182766...

9.4CVSS5.4AI score0.00236EPSS

Exploits1