N
Vendor security profile
nodejs
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs75
Critical4
CISA KEV0
Public exploit4
Patch rate%43
Avg. CVSS6.7
12-month vulnerability rate
0
0
2
0
11
0
0
9
8
6
12
0
CVE KEV
CVE severity distribution
75toplam CVE
Critical4 (5%)
High39 (52%)
Medium26 (35%)
Low6 (8%)
Patch and exploitation view
%43
Verified patch
%0
CISA KEV
%5
Public exploit
32Patch available
0Partial
0Workaround
0Vendor: no patch
43Unknown
Latest vulnerabilities
5.9
CVE-2026-84890
Resource allocation without limits in Node.js Undici
N
Patch status unknownEPSS %0
7.5
CVE-2026-19534
Vulnerability in Node.js Undici
N
Patch status unknownEPSS %0
3.7
CVE-2026-18540
Vulnerability in Node.js Undici
N
Patch status unknownEPSS %0
5.9
CVE-2026-18149
Vulnerability in Node.js Undici
N
Patch status unknownEPSS %0
7.4
CVE-2026-85152
Vulnerability in Node.js Undici
N
Patch status unknownEPSS %0
5.9
CVE-2026-85024
Vulnerability in Node.js Undici
N
Patch status unknownEPSS %0
7.5
CVE-2026-85014
Vulnerability in Node.js Undici
N
Patch status unknownEPSS %0
5.3
CVE-2026-85008
Vulnerability in Node.js Undici
N
Patch status unknownEPSS %0
9.1
CVE-2026-84961
Improper certificate validation in Node.js Undici
N
Patch status unknownEPSS %0
5.3
CVE-2026-84947
Improper input validation in Node.js Undici
N
Patch status unknownEPSS %0