Node.js — программная платформа, основанная на движке V8 (компилирующем JavaScript в машинный код)
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 24.22.2 | 24.22.2 | ||
| 24.22.1 | 24.22.1 | ||
| 24.22.0 | 24.22.0 | ||
| 24.21.0 | 24.21.0 | ||
| 24.20.0 | 24.20.0 | ||
| 24.19.0 | 24.19.0 | ||
| 24.18.1 | 24.18.1 | ||
| 24.18.0 | 24.18.0 | ||
| 24.17.0 | 24.17.0 | ||
| 24.16.0 | 24.16.0 |
Показывать по
Количество 1 296
CVE-2026-48618
A flaw in Node.js TLS hostname handling can cause Node.js unicode dot ...
CVE-2026-48933
A flaw in Node.js WebCrypto implementation can crash the process if th ...
CVE-2026-48930
A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnam ...
CVE-2026-48615
A flaw in Node.js proxy tunnel error handling could expose proxy crede ...
CVE-2026-48934
A flaw in Node.js TLS host verification can cause an attacker to bypas ...
CVE-2026-48935
A flaw in Node.js Permission API can cause a file metadata to be modif ...
CVE-2026-48619
A flaw in Node.js HTTP/2 client allows a server to send an unlimited n ...
CVE-2026-48936
A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**.
CVE-2026-48619
A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
CVE-2026-48928
A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| CVE-2026-48618 A flaw in Node.js TLS hostname handling can cause Node.js unicode dot ... | CVSS3: 6.5 | 3% Низкий | 5 месяцев назад |
| CVE-2026-48933 A flaw in Node.js WebCrypto implementation can crash the process if th ... | CVSS3: 7.5 | 4% Низкий | 5 месяцев назад |
| CVE-2026-48930 A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnam ... | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
| CVE-2026-48615 A flaw in Node.js proxy tunnel error handling could expose proxy crede ... | CVSS3: 7.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-48934 A flaw in Node.js TLS host verification can cause an attacker to bypas ... | CVSS3: 4.3 | 0% Низкий | 5 месяцев назад |
| CVE-2026-48935 A flaw in Node.js Permission API can cause a file metadata to be modif ... | CVSS3: 3.3 | 0% Низкий | 5 месяцев назад |
| CVE-2026-48619 A flaw in Node.js HTTP/2 client allows a server to send an unlimited n ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-48936 A flaw in Node.js Permission API can cause a local server to be started (via a Unix domain socket), even without the `--allow-net` permission. This vulnerability affects one supported release line: **Node.js 26**. | CVSS3: 3.3 | 0% Низкий | 5 месяцев назад |
| CVE-2026-48619 A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| CVE-2026-48928 A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**. | CVSS3: 5.4 | 0% Низкий | 5 месяцев назад |
Уязвимостей на страницу