NO
Product
Node.js
by Joyent · last CVE Dec 11, 2014
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Node.js to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-7192
–
13%
Dec 11
Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows…
Affected: through 0.10.32
CVE-2014-6394
–
4%
Oct 8
visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access…
Affected: through 0.8.3; 0.8.0; 0.8.1; 0.8.2
Showing 2