Node

Every one of the 144 is a mark on the map. Named now: 53 to 78, most at risk first.

53. The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generates a private key if none has been set…CVE-2023-30590NodeJS · 1.5% likely

    2 bounty reports

54. Due to the improper handling of batch files in child_process.spawn / child_process.spawnSync, a malicious command line argument can inject arbitrary commands and achieve code exec…CVE-2024-27980NodeJS · CVSS 8.1 · 1.4% likely

    CWE-77

55. A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing…CVE-2025-23085NodeJS · CVSS 5.3 · 1.4% likely

    CWE-4011 bounty report

56. A vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non-* argument. This f…CVE-2023-32005NodeJS · CVSS 5.3 · 1.4% likely

    CWE-732

57. A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the experimental permission model is enabled, which can bypass and/or…CVE-2023-30586NodeJS · CVSS 7.5 · 1.3% likely

    CWE-8621 bounty report

58. A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack through resource exhaustion when using the fetch() function to retrieve content from…CVE-2024-22025NodeJS · CVSS 6.5 · 1.3% likely

    CWE-4041 bounty report

59. Node.js versions which bundle an unpatched version of OpenSSL or run against a dynamically linked version of OpenSSL which are unpatched are vulnerable to the Marvin Attack - http…CVE-2023-46809NodeJS · CVSS 7.4 · 1.3% likely

    CWE-3851 bounty report

60. The permission model protects itself against path traversal attacks by calling path.resolve() on any paths given by the user. If the path is to be treated as a Buffer, the impleme…CVE-2024-21896NodeJS · CVSS 7.9 · 1.3% likely

    CWE-272 bounty reports

61. The V8 release used in Node.js v24.0.0 has changed how string hashes are computed using rapidhash. This implementation re-introduces the HashDoS vulnerability as an attacker who c…CVE-2025-27209nodejs · CVSS 7.5 · 1.3% likely

    CWE-4071 bounty report

62. Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be overwitten with user-defined implementations leading to files…CVE-2024-21891NodeJS · CVSS 7.9 · 1.2% likely

    CWE-221 bounty report

63. When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation and return a forged checksum to the node…CVE-2023-38552NodeJS · 1.2% likely

    CWE-3451 bounty report

64. `fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp() API…CVE-2023-32003NodeJS · CVSS 5.3 · 1.2% likely

    CWE-22

65. When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible to DoS attacks when t…CVE-2023-30588NodeJS · 1.2% likely
66. The team has identified a critical vulnerability in the http server of the most recent version of Node, where malformed headers can lead to HTTP request smuggling. Specifically, i…CVE-2024-27982NodeJS · CVSS 6.5 · 1.2% likely

    CWE-4441 bounty report

67. A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions…CVE-2026-21637nodejs · CVSS 5.9 · 1.1% likely

    CWE-4003 bounty reports

68. Maliciously crafted export names in an imported WebAssembly module can inject JavaScript code. The injected code may be able to access data and functions that the WebAssembly modu…CVE-2023-39333NodeJS · CVSS 5.3 · 1.1% likely

    CWE-94

69. A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising syst…CVE-2024-22020NodeJS · CVSS 6.5 · 1.1% likely

    CWE-941 bounty report

70. Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSyn…CVE-2024-36138NodeJS · CVSS 8.1 · 1.1% likely

    CWE-771 bounty report

71. The use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outside of the policy.json definition. This vulnerability affect…CVE-2023-30581NodeJS · CVSS 7.5 · 1.1% likely

    CWE-8621 bounty report

72. The Node.js Permission Model does not clarify in the documentation that wildcards should be only used as the last character of a file path. For example: ``` --allow-fs-read=/home/…CVE-2024-21890NodeJS · CVSS 5 · 0.9% likely

    2 bounty reports

73. setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to perform privileged operations despite presumab…CVE-2024-22017NodeJS · CVSS 7.3 · 0.9% likely

    CWE-2501 bounty report

74. A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `--permission` is enabled. Even without `--allow-net`, attacke…CVE-2026-21636nodejs · CVSS 5.8 · 0.9% likely

    CWE-2841 bounty report

75. The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Su…CVE-2025-23166nodejs · CVSS 7.5 · 0.8% likely

    CWE-2481 bounty report

76. Node.js is vulnerable to a remotely triggerable uncaught exception in TLS servers via deferred handshake callbacksCVE-2026-126051nodejs · CVSS 7.5 · 0.8% likelycovered by CyberSIXT

    CWE-4762 articles2 articles this week: Node.js fixes 16 flaws exposing servers to crashes and data leaks

77. A vulnerability in Node.js version 20 allows for bypassing restrictions set by the --experimental-permission flag using the built-in inspector module (node:inspector). By exploiti…CVE-2023-30587NodeJS · CVSS 7.5 · 0.7% likely

    CWE-2841 bounty report

78. fs.openAsBlob() can bypass the experimental permission model when using the file system read restriction with the `--allow-fs-read` flag in Node.js 20. This flaw arises from a mis…CVE-2023-30583NodeJS · CVSS 7.5 · 0.7% likely

    CWE-2841 bounty report

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.