Search for packages
| purl | pkg:deb/debian/nodejs@0?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-35e4-h5zk-5ffn | A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied. |
CVE-2024-3566
|
| VCID-39c4-njbs-pyeq | Multiple vulnerabilities have been found in NodeJS, the worst of which could result in the arbitrary execution of code. |
CVE-2020-8251
|
| VCID-3nb1-jud1-rkgk | nodejs: `Buffer` to UTF8 `String` conversion DoS |
CVE-2015-5380
|
| VCID-3v19-cq1w-y3cz | nodejs: Vulnerable to CVE-2017-3737 due to embedded OpenSSL |
CVE-2017-15896
|
| VCID-43sf-4r41-wugc | nodejs: Nodejs filesystem permissions bypass |
CVE-2025-55132
|
| VCID-4ak9-89fm-ybh2 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-30582
|
| VCID-5afy-ud31-hbaw | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-21890
|
| VCID-67xm-uc9p-y7f2 | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-22020
|
| VCID-7cth-47w2-17hy | Multiple vulnerabilities have been found in c-ares, the worst of which could result in the loss of confidentiality or integrity. |
CVE-2021-22940
|
| VCID-7nnu-jtjx-u3ff | Node.js: Permissions policies can be bypassed via process.mainModule |
CVE-2023-23918
|
| VCID-7z51-jgw6-v7hr | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-32005
|
| VCID-8myg-sjwy-yqfp | Node.js: OpenSSL error handling issues in nodejs crypto library |
CVE-2023-23919
|
| VCID-8qmf-bwmg-5bar | nodejs: Unitialized buffer due to incorrect encoding |
CVE-2017-15897
|
| VCID-9uux-1n93-4kcs | nodejs: Unintentional exposure of uninitialized memory |
CVE-2018-7166
|
| VCID-a7mj-p1d7-h3cv | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2023-39331
|
| VCID-ap4u-dkwx-1kb3 | Multiple vulnerabilities have been found in c-ares, the worst of which could result in the loss of confidentiality or integrity. |
CVE-2021-22931
|
| VCID-apbs-8ge7-dyg3 | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-21896
|
| VCID-b1vd-c8xt-dqc6 | Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. |
CVE-2024-36138
|
| VCID-b7hq-5yyx-tuhs | Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configuration of permissions in the installation directory allows an attacker to perform two different escalation attacks: PATH and DLL hijacking. |
CVE-2021-22921
|
| VCID-cjrh-xgy5-63ga | An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX. This vulnerability affects Windows users of `path.join` API. |
CVE-2025-27210
|
| VCID-ec66-gwvw-kucs | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-30587
|
| VCID-enz6-qdn6-dkgm | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2023-38552
|
| VCID-fetp-hvhq-dube | Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing |
CVE-2026-21712
|
| VCID-g28p-7shw-n3bn | Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules. |
CVE-2017-14849
|
| VCID-g5wj-ffk1-7bg7 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-30586
|
| VCID-jbph-d393-byd4 | nodejs: privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process |
CVE-2023-30585
|
| VCID-jbws-qjq3-qbhq | nodejs: Nodejs network segmentation bypass |
CVE-2026-21636
|
| VCID-k4cj-47gd-s7ck | nodejs: Nodejs memory leak |
CVE-2025-59464
|
| VCID-krft-297e-qfdw | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-36137
|
| VCID-kvmm-gh2f-zqau | nodejs: Node.js Rapidhash HashDoS Vulnerability |
CVE-2025-27209
|
| VCID-mqcy-2run-93d6 | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-21892
|
| VCID-p31t-nxwe-yyf2 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-32558
|
| VCID-p9sg-8byk-eydy | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-37372
|
| VCID-pd4q-4b15-gqey | A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special on Windows. As a result, although Node.js assumes a relative path, it actually refers to the root directory. On Windows, a path that does not start with the file separator is treated as relative to the current directory. This vulnerability affects Windows users of `path.join` API. |
CVE-2025-23084
|
| VCID-pwe6-zwyr-nqhy | nodejs: DoS via specific windowBits value |
CVE-2017-14919
|
| VCID-q75s-43sx-4kbg | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-30588
|
| VCID-rg1f-5nhq-m7ea | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-32004
|
| VCID-s1a4-9r1m-8uaw | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2023-39332
|
| VCID-sthj-jvke-tyg7 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-30584
|
| VCID-tpck-fwrj-ruaq | Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine:* OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf” exists.Whenever the above conditions are present, `node.exe` will search for `providers.dll` in the current user directory.After that, `node.exe` will try to search for `providers.dll` by the DLL Search Order in Windows.It is possible for an attacker to place the malicious file `providers.dll` under a variety of paths and exploit this vulnerability. |
CVE-2022-32223
|
| VCID-ueyx-hwjr-fuhq | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-30583
|
| VCID-uftn-4gjb-dqe6 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2023-32003
|
| VCID-v3uy-dqn9-qye5 | Multiple vulnerabilities have been discovered in Node.js. |
CVE-2022-32222
|
| VCID-vhg4-51cg-ebaa | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-21891
|
| VCID-w6yn-qt4p-vudt | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-22018
|
| VCID-x1an-pjq4-nbby | nodejs: Nodejs file permissions bypass |
CVE-2025-55130
|
| VCID-xert-byqc-xbe2 | Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks |
CVE-2026-21711
|
| VCID-xkpz-pb5y-jqcy | nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js |
CVE-2025-23166
|
| VCID-xva8-adbf-87h3 | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2024-22017
|
| VCID-ydzj-e97m-k3cp | Multiple vulnerabilities have been discovered in Node.js, the worst of which can lead to arbitrary code execution. |
CVE-2025-23083
|
| VCID-yxvf-4pb4-d7ec | Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. |
CVE-2023-39333
|
| VCID-yz6h-h3bb-27ee | Node.js: Fail to Escape Arguments Properly in Microsoft Windows |
CVE-2024-27980
|
| VCID-zckz-447u-gueb | Multiple vulnerabilities have been found in NodeJS, the worst of which could result in the arbitrary execution of code. |
CVE-2020-8172
|
| VCID-znta-r3v4-hyg1 | nodejs: Memory Leak in Node.js ReadFileUtf8 Binding Leading to DoS |
CVE-2025-23165
|