Node.js Security Vulnerabilities and Issues — Node.js CVE List | Vulners.com

Lucene search

K

NodejsNode.js

4 matches found

CVE•added 2023/02/23 8:15 p.m.•339 views

CVE-2023-23918

A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and

7.5CVSS8AI score0.00021EPSS

CVE•added 2023/02/23 8:15 p.m.•339 views

CVE-2023-23920

An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and

4.2CVSS6.1AI score0.00099EPSS

CVE•added 2023/02/23 8:15 p.m.•321 views

CVE-2023-23919

A cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1,

7.5CVSS7AI score0.00671EPSS

CVE•added 2023/02/16 6:15 p.m.•277 views

CVE-2023-23936

Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect host HTTP header from CRLF injection vulnerabilities. This issue is patched in Undici v5.19.1. As a workaround, sanitize the headers.host string before passing to u...

6.5CVSS6.9AI score0.00538EPSS