Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/nodejs@18.19.0%2Bdfsg-6~deb12u1?distro=trixie
purl pkg:deb/debian/nodejs@18.19.0%2Bdfsg-6~deb12u1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (12)
Vulnerability Summary Aliases
VCID-38k9-23j3-eqh7 Multiple vulnerabilities have been discovered in Node.js. CVE-2023-30581
VCID-7nnu-jtjx-u3ff Node.js: Permissions policies can be bypassed via process.mainModule CVE-2023-23918
VCID-8myg-sjwy-yqfp Node.js: OpenSSL error handling issues in nodejs crypto library CVE-2023-23919
VCID-9yq7-aba3-c7c3 Multiple vulnerabilities have been discovered in Node.js. CVE-2023-32559
VCID-e7u5-356v-jbg7 Multiple vulnerabilities have been discovered in Node.js. CVE-2023-30590
VCID-enz6-qdn6-dkgm Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. CVE-2023-38552
VCID-hnjv-fp2r-vqfq Node.js: insecure loading of ICU data through ICU_DATA environment variable CVE-2023-23920
VCID-kj75-vmwa-gqgq Multiple vulnerabilities have been discovered in Node.js. CVE-2023-32006
VCID-q75s-43sx-4kbg Multiple vulnerabilities have been discovered in Node.js. CVE-2023-30588
VCID-sag8-repb-g3f4 Multiple vulnerabilities have been discovered in Node.js. CVE-2023-32002
VCID-yxvf-4pb4-d7ec Multiple vulnerabilities have been discovered in Node.js, the worst of which could lead to execution of arbitrary code. CVE-2023-39333
VCID-zstw-3wmu-u3c8 llhttp vulnerable to HTTP request smuggling The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser. According to RFC7230 section 3, only the CRLF sequence should delimit each header-field. This impacts all Node.js active versions: v16, v18, and, v20 CVE-2023-30589
GHSA-cggh-pq45-6h9x

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:04:11.363953+00:00 Debian Importer Fixing VCID-9yq7-aba3-c7c3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:15:18.411319+00:00 Debian Importer Fixing VCID-yxvf-4pb4-d7ec https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:14:35.441694+00:00 Debian Importer Fixing VCID-e7u5-356v-jbg7 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:48:50.732675+00:00 Debian Importer Fixing VCID-7nnu-jtjx-u3ff https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:41:44.767652+00:00 Debian Importer Fixing VCID-zstw-3wmu-u3c8 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:34:12.819133+00:00 Debian Importer Fixing VCID-8myg-sjwy-yqfp https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:02:00.373161+00:00 Debian Importer Fixing VCID-hnjv-fp2r-vqfq https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:57:05.758528+00:00 Debian Importer Fixing VCID-q75s-43sx-4kbg https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:55:12.819894+00:00 Debian Importer Fixing VCID-enz6-qdn6-dkgm https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T12:48:59.375822+00:00 Debian Importer Fixing VCID-kj75-vmwa-gqgq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T12:48:59.101847+00:00 Debian Importer Fixing VCID-sag8-repb-g3f4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T12:48:58.316381+00:00 Debian Importer Fixing VCID-38k9-23j3-eqh7 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T09:19:07.775175+00:00 Debian Importer Fixing VCID-yxvf-4pb4-d7ec https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:20:09.042489+00:00 Debian Importer Fixing VCID-9yq7-aba3-c7c3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:50:11.988636+00:00 Debian Importer Fixing VCID-hnjv-fp2r-vqfq https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:22:15.892286+00:00 Debian Importer Fixing VCID-e7u5-356v-jbg7 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:55:52.053436+00:00 Debian Importer Fixing VCID-8myg-sjwy-yqfp https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:49:58.803526+00:00 Debian Importer Fixing VCID-enz6-qdn6-dkgm https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:33:26.814587+00:00 Debian Importer Fixing VCID-7nnu-jtjx-u3ff https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:26:56.735404+00:00 Debian Importer Fixing VCID-zstw-3wmu-u3c8 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:00:26.977249+00:00 Debian Importer Fixing VCID-q75s-43sx-4kbg https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:47:24.719967+00:00 Debian Importer Fixing VCID-yxvf-4pb4-d7ec https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:24.573449+00:00 Debian Importer Fixing VCID-enz6-qdn6-dkgm https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:24.508445+00:00 Debian Importer Fixing VCID-9yq7-aba3-c7c3 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:24.409217+00:00 Debian Importer Fixing VCID-kj75-vmwa-gqgq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:24.219325+00:00 Debian Importer Fixing VCID-sag8-repb-g3f4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:24.146258+00:00 Debian Importer Fixing VCID-e7u5-356v-jbg7 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:24.079254+00:00 Debian Importer Fixing VCID-zstw-3wmu-u3c8 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:24.013206+00:00 Debian Importer Fixing VCID-q75s-43sx-4kbg https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:23.710194+00:00 Debian Importer Fixing VCID-38k9-23j3-eqh7 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:23.646113+00:00 Debian Importer Fixing VCID-hnjv-fp2r-vqfq https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:23.581039+00:00 Debian Importer Fixing VCID-8myg-sjwy-yqfp https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:47:23.516720+00:00 Debian Importer Fixing VCID-7nnu-jtjx-u3ff https://security-tracker.debian.org/tracker/data/json 38.1.0