CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5465 matches found

Tenable Nessus•added 2026/02/05 12:00 a.m.•10 views

Oracle Linux 10 : nodejs22 (ELSA-2026-1843)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1843 advisory. 1:22.22.0-3 - Bump release to get correct RHEL build 1:22.22.0-2 - Filter for nodejs22.fmf in gating plan 1:22.22.0-1 - Update to 22.22.0 1:22.19.0-3 ...

9.1CVSS6.8AI score0.04021EPSS

SaveExploits2References7

Tenable Nessus•added 2026/02/05 12:00 a.m.•14 views

Photon OS 4.0: Nodejs PHSA-2026-4.0-0956

An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0956. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.1CVSS6.7AI score0.04021EPSS

SaveExploits2References7

attackerkb•added 2026/02/04 9:51 p.m.•17 views

CVE-2026-25547

@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service DoS issue caused by unbounded brace range expansion. When an attacker provides a pattern containing repeated numeric brace ranges, t...

9.2CVSS6.4AI score0.00497EPSS

SaveExploits0References2Affected Software1

Oracle linux•added 2026/02/04 12:00 a.m.•19 views

nodejs22 security update

1:22.22.0-3 - Bump release to get correct RHEL build 1:22.22.0-2 - Filter for nodejs22.fmf in gating plan 1:22.22.0-1 - Update to 22.22.0 1:22.19.0-3 - Unit-tests adjustment - disable internet/test-dgram-membership...

9.1CVSS6.8AI score0.04021EPSS

SaveExploits2

Photon•added 2026/02/03 12:00 a.m.•31 views

Critical Photon OS Security Update - PHSA-2026-4.0-0956

Updates of 'nodejs', 'expat' packages of Photon OS have been released...

9.1CVSS6.8AI score0.03507EPSS

SaveExploits2

Positive Technologies•added 2026/02/03 12:00 a.m.•12 views

PT-2026-6213

Name of the Vulnerable Software and Affected Versions Compressing versions 1.10.3 and prior Compressing version 2.0.0 Description Compressing, a compressing and uncompressing library for Node.js, does not validate symbolic link targets when extracting TAR archives. This allows an attacker to embe...

8.4CVSS6AI score0.00353EPSS

SaveExploits1References16

OSV•added 2026/02/03 12:00 a.m.•9 views

ALSA-2026:1842 Important: nodejs24 security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

9.1CVSS6.8AI score0.04021EPSS

SaveExploits2References14

OSV•added 2026/02/03 12:00 a.m.•18 views

ALSA-2026:1843 Important: nodejs22 security update

Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...

9.1CVSS6.8AI score0.04021EPSS

SaveExploits2References14