Corrupted pointer in node::fs::ReadFileUtf8(const FunctionCallbackInfo<Value>& args) when args[0] is a string. #3083428 Valid Memory Corruption Low 2025-05-15 – 59 Permission Model bypass: process.report writes (and overwrites) files outside --allow-fs-write paths #3815767 Valid Access Control Low 2026-07-30 – 35 Permission model improperly processes UNC paths #2079103 Valid Access Control Low 2024-07-15 – 35 fs.futimes() Bypasses Read-Only Permission Model #3390084 Valid Access Control Low 2026-01-15 – 34 Potential HTTP Request Smuggling in nodejs #1002188 Valid Injection and Smuggling Low 2021-01-07 $250 34 Permission Model Bypass via `process.report.writeReport()` Path Misvalidation #3692858 Valid Access Control Low 2026-06-18 – 29 Permission Model Bypass: `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write` #3838601 Valid Access Control Low 2026-07-29 – 21 fs.fchown/fchmod bypasses permission model #2472071 Valid Access Control Low 2024-07-09 – 20 Built-in TLS module unexpectedly treats "rejectUnauthorized: undefined" as "rejectUnauthorized: false", disabling all certificate validation #1278254 Valid Cryptography Low 2021-09-10 $150 20 Proxy-Authorization header is not cleared in cross-domain redirect in undici #2352957 Valid Information Disclosure Low 2024-03-12 – 18 fs.lstat bypasses permission model #2145862 Valid Access Control Low 2024-07-09 – 18 HTTP Request Smuggling via Silent Header Truncation in Node.js HTTP Parser #3564941 Valid Injection and Smuggling Low 2026-08-28 – 16 Prototype pollution via console.table properties #1431042 Valid Other weaknesses Low 2022-01-11 – 16 Permission Model bypass with fs.realpathSync #3838675 Valid Access Control Low 2026-10-23 – 15 Permission Model Bypass in realpathSync.native Allows File Existence Disclosure #3480841 Valid Information Disclosure Low 2026-03-30 – 15 HTTP Response Queue Poisoning via TOCTOU Race Condition in `http.Agent` #3582376 Valid Race Conditions Low 2026-06-25 – 11 Proxy-Authorization header not cleared on cross-origin redirect in undici.request #2408074 Valid Authentication Low 2024-05-03 – 9 Unix domain socket server bypasses --permission network restrictions (incomplete CVE-2026-21636 fix) #3618831 Valid Access Control Low 2026-06-25 – 8 Slowloris, body parsing #799072 Valid Denial of Service Low 2020-10-17 $250 8 CVE-2024-36137 Patch Bypass - FileHandle.chmod/chown #3449392 Valid Access Control Low 2026-03-30 – 7 Permission Model filesystem over-grant via wildcard radix lookup #3996423 Valid Access Control Low 2026-10-27 – 6 Permission Model bypass via FileHandle.utimes() in the promises API #3625987 Valid Access Control Low 2026-06-25 – 4 Insecure loading of ICU data through ICU_DATA environment variable #1625036 Valid No weakness recorded Low 2023-03-19 – 4 Regular Expression Denial of Service in Headers #1784449 Valid Denial of Service Low 2023-03-19 – 3 Node.js HTTP/2 Large Settings Frame DoS #446662 Valid Denial of Service Low 2020-07-02 – 2