node-opcua

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Denial of Service (DoS)CVE-2022-24375Node-Opcua Project · CVSS 7.5 · 1.7% likely

   CWE-400

2. Denial of Service (DoS)CVE-2022-21208Node-Opcua Project · CVSS 7.5 · 1.5% likely

   CWE-1284

3. Denial of Service (DoS)CVE-2022-25231Node-Opcua Project · CVSS 7.5 · 1.4% likely

   CWE-770

4. node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoSCVE-2026-54156node-opcua · CVSS 7.5 · 0.8% likely

   CWE-770

5. node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissionsCVE-2026-95860node-opcua · CVSS 9.1 · 0.6% likely

   CWE-636

6. node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource ExhaustionCVE-2026-68904node-opcua · CVSS 7 · 0.4% likely

   CWE-400

7. node-opcua: Missing nonce verification in UserNameIdentityToken authenticationCVE-2026-54155node-opcua · CVSS 7.7 · 0.4% likely

   CWE-347

8. node-opcua: Prototype Pollution via internal `fieldsToJson()` implementation (Related to CVE-2024-57086)CVE-2026-69200node-opcua · CVSS 3.7 · 0.3% likely

   CWE-1321

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.