Search for packages
| purl | pkg:deb/debian/nodejs@20.19.2%2Bdfsg-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1vp3-fzdr-yqbm | Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read restrictions |
CVE-2026-21715
|
| VCID-2t7c-dju9-pff6 | Node.js: Node.js: Information disclosure via timing oracle in HMAC verification |
CVE-2026-21713
|
| VCID-43sf-4r41-wugc | nodejs: Nodejs filesystem permissions bypass |
CVE-2025-55132
|
| VCID-96yh-1wub-zucg | Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames |
CVE-2026-21714
|
| VCID-98fy-tedc-ube7 | nodejs: Nodejs uninitialized memory exposure |
CVE-2025-55131
|
| VCID-bjza-25hu-vkad | nodejs: Nodejs denial of service |
CVE-2026-21637
|
| VCID-dgkh-jdah-wfh9 | nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions |
CVE-2026-21717
|
| VCID-dt7u-3usg-9uet | Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header |
CVE-2026-21710
|
| VCID-twc8-ewm7-wkb1 | nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. |
CVE-2026-21716
|
| VCID-u8bq-8jp4-jkem | nodejs: Nodejs denial of service |
CVE-2025-59466
|
| VCID-v7uy-445x-tuan | nodejs: Nodejs denial of service |
CVE-2025-59465
|
| VCID-wf5t-3pwz-c7d7 | Multiple vulnerabilities have been discovered in Node.js, the worst of which can lead to arbitrary code execution. |
CVE-2025-23085
|
| VCID-x1an-pjq4-nbby | nodejs: Nodejs file permissions bypass |
CVE-2025-55130
|
| VCID-xkpz-pb5y-jqcy | nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js |
CVE-2025-23166
|