Vulnerability Directory
If you’re currently using these frameworks in your application’s tech stack, your application could be vulnerable.
Secure drop-in replacements for open source software from HeroDevs helps you stay secure, compliant, and compatible while you migrate.
Switch to Never-Ending Support (NES) from HeroDevs to immediately mitigate these vulnerabilities.
Severity
ID
Technology
Libraries Affected
Category
Version(s) Affected
Published Date
Medium
Node.js
Node.js
Improper Certificate Validation
<=21.7.3 >=22.0.0 <22.23.0 >=23.0.0 <=23.11.1 >=24.0.0 <24.17.0 >=25.0.0 <=25.9.0 >=26.0.0 <26.3.1
Oct 13, 2026
High
Node.js
Node.js
Integer Overflow or Wraparound
>=15.0.0 <=21.7.3 >=22.0.0 <22.23.0 >=23.0.0 <=23.11.1 >=24.0.0 <24.17.0 >=25.0.0 <=25.9.0 >=26.0.0 <26.3.1
Oct 13, 2026
Critical
Node.js
Node.js
Improper Input Validation (4.16)
<=21.7.3 >=22.0.0 <22.23.0 >=23.0.0 <=23.11.1 >=24.0.0 <24.17.0 >=25.0.0 <=25.9.0 >=26.0.0 <26.3.1
Oct 13, 2026
Medium
Node.js
Node.js
Uncontrolled Resource Consumption
>=8.4.0 <=19.9.0 >=20.0.0 <20.20.2 >=21.0.0 <=21.7.3 >=22.0.0 <22.22.2 >=23.0.0 <=23.11.1 >=24.0.0 <24.14.1 >=25.0.0 <25.8.2
Oct 13, 2026
Medium
Node.js
Node.js
Signature Forgery
>=15.0.0 <=15.14.0 >=16.0.0 <=16.20.2 >=17.0.0 <=17.9.1 >=18.0.0 <=18.20.8 >=19.0.0 <=19.9.0 >=20.0.0 <20.20.2 >=21.0.0 <=21.7.3 >=22.0.0 <22.22.2 >=23.0.0 <=23.11.1 >=24.0.0 <24.14.1 >=25.0.0 <25.8.2
Oct 13, 2026
High
Node.js
Node.js
Denial of Service
>=16.17.0 <=16.20.2 >=18.3.0 <=18.20.8 >=19.0.0 <=19.9.0 >=20.0.0 <20.20.2 >=21.0.0 <=21.7.3 >=22.0.0 <22.22.2 >=23.0.0 <=23.11.1 >=24.0.0 <24.14.1 >=25.0.0 <25.8.2
Oct 13, 2026
Medium
Node.js
Node.js
Cryptographic Weakness
>=16.15.0 <=16.20.2 >=17.5.0 <=17.9.1 >=18.0.0 <18.20.6 >=19.0.0 <=19.9.0 >=20.0.0 <20.18.2 >=21.0.0 <=21.7.3 >=22.0.0 <22.13.1 >=23.0.0 <23.6.1
Oct 13, 2026
Low
Node.js
Node.js
Insufficient Verification of Data Authenticity
>=16.18.0 <=16.20.2 >=18.9.0 <18.20.1 >=19.0.0 <=19.9.0 >=20.0.0 <20.12.1 >=21.0.0 <21.7.2
Oct 13, 2026
Medium
Node.js
Node.js
Information Exposure
>=16.15.0 <=16.20.2 >=17.5.0 <=17.9.1 >=18.0.0 <18.19.1 >=19.0.0 <=19.9.0 >=20.0.0 <20.11.1 >=21.0.0 <21.6.2
Oct 13, 2026
Medium
Node.js
Node.js
Information Exposure
<=17.9.1 >=18.0.0 <18.20.8 >=19.0.0 <=19.9.0 >=20.0.0 <20.19.5 >=21.0.0 <=21.7.3 >=22.0.0 <22.15.0 >=23.0.0 <23.10.0
Oct 13, 2026
Medium
Node.js
Node.js
Buffer Over-read
<=17.9.1 >=18.0.0 <18.20.8 >=19.0.0 <=19.9.0 >=20.0.0 <20.19.5 >=21.0.0 <=21.7.3 >=22.0.0 <22.15.0 >=23.0.0 <23.10.0
Oct 13, 2026
Critical
Node.js
Node.js
Access of Resource Using Incompatible Type ('Type Confusion')
>=18.0.0 <=18.20.8 >=19.0.0 <=19.9.0 >=20.0.0 <=20.20.2 >=21.0.0 <=21.7.3 >=22.0.0 <22.3.0
Oct 13, 2026
High
Node.js
Node.js
Heap-based Buffer Overflow
>=16.0.0 <=16.20.2 >=17.0.0 <=17.9.1 >=18.0.0 <=18.20.8 >=19.0.0 <=19.9.0 >=20.0.0 <=20.20.2 >=21.0.0 <=21.7.3 >=22.0.0 <22.3.0
Oct 13, 2026
Medium
Node.js
Node.js
Denial of Service
<=16.20.2 >=17.0.0 <=17.9.1 >=18.0.0 <18.19.1 >=19.0.0 <=19.9.0 >=20.0.0 <20.11.1 >=21.0.0 <21.6.2
Oct 13, 2026
High
Node.js
Node.js
Integer Overflow or Wraparound
<=16.20.2 >=17.0.0 <=17.9.1 >=18.0.0 <18.19.0 >=19.0.0 <=19.9.0 >=20.0.0 <20.7.0
Oct 13, 2026
No results found
Please enter a valid Vulnerability ID number or Technology name.