nodejs security advisories
2 threat alerts tracking vulnerabilities and security advisories that affect nodejs products.
Vulnios monitors nodejs CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent nodejs security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2026-48930 — nodejs — node.js
A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all suppo
criticalCVE-2026-48930Critical Vulnerability: CVE-2017-15896 — nodejs — node.js
Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake failure. The result was that an active network attacker could send application data
criticalCVE-2017-15896
Track nodejs exposure across your environment
Vulnios automatically cross-references your asset inventory against new nodejs CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan