CLEANSTART-2026-YC26547 Security fixes in nodejs 8.9.3-r0

Package nodejs version 8.9.3-r0 fixes 2 vulnerabilities: CVE-2017-15896, CVE-2017-15897...

CLEANSTART-2026-RE30650 Security fixes in nodejs 18.17.1-r0

Package nodejs version 18.17.1-r0 fixes 3 vulnerabilities: CVE-2023-32002, CVE-2023-32006, CVE-2023-32559...

CLEANSTART-2026-SO42358 Security fixes in nodejs 14.16.1-r0

Package nodejs version 14.16.1-r0 fixes 1 vulnerabilities: CVE-2020-7774...

CLEANSTART-2026-OL35355 Security fixes in nodejs 20.15.1-r0

Package nodejs version 20.15.1-r0 fixes 3 vulnerabilities: CVE-2024-22018, CVE-2024-22020, CVE-2024-36137...

CLEANSTART-2026-LH82382 Security fixes in nodejs 12.15.0-r0

Package nodejs version 12.15.0-r0 fixes 3 vulnerabilities: CVE-2019-15606, CVE-2019-15605, CVE-2019-15604...

CLEANSTART-2026-CW77982 Security fixes in nodejs 14.15.1-r0

Package nodejs version 14.15.1-r0 fixes 1 vulnerabilities: CVE-2020-8277...

CLEANSTART-2026-SU34553 Security fixes in nodejs 12.18.4-r0

Package nodejs version 12.18.4-r0 fixes 2 vulnerabilities: CVE-2020-8201, CVE-2020-8252...

CLEANSTART-2026-OY23863 Security fixes in nodejs 14.15.4-r0

Package nodejs version 14.15.4-r0 fixes 2 vulnerabilities: CVE-2020-8265, CVE-2020-8287...

ALPINE-CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

CVE-2026-56850

CVE-2026-56850 affects Node.js 22.x, 24.x, and 26.x. The issue is in the HTTPS Agent’s connection reuse, where PFX object-array key collisions can cause mutual TLS (mTLS) client identities to be reused across requests with different client certificates. This could enable cross-certificate identit...

CVE-2026-56850

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS mTLS client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js 26.x, 24.x, and 22.x...

CVE-2026-58043

A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries. Under --permission, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist. This...

CVE-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...

CVE-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...

CVE-2026-56847

creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:47+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260730 2026-07-30 14:15:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrumtyo7h22j...

CVE-2026-56850

creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:42+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260730 2026-07-30 14:15:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrumtyo7h22j...

CVE-2026-58044

creationtimestamp| type| source ---|---|--- 2026-07-30 04:46:25+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260730 2026-07-30 14:15:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrumtyo7h22j...

nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator

A flaw was found in Node.js's node:sqlite module. This vulnerability allows a previously used database statement, which should have been reset, to be re-executed with new parameters. This could lead to unintended data modifications or integrity issues within the application...

[SECURITY] Fedora 44 Update: nodejs24-24.18.0-1.fc44

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

Fedora 44 : nodejs24 (2026-ce5dac2ed8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ce5dac2ed8 advisory. Update to version 24.18.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...