NO
Product
node-opcua
4
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 1
Watch
Add node-opcua to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54155 | 7.7 | Sep 14 | node-opcua: Missing nonce verification in UserNameIdentityToken authentication Affected: < 2.166.0 |
| CVE-2026-54156 | 7.5 | Sep 14 | node-opcua: Unbounded nonce cache enables unauthenticated heap exhaustion DoS Affected: < 2.166.0 |
| CVE-2026-68904 | 7.0 | Sep 16 | node-opcua: TCP Socket Leak (FIN-WAIT-2) via keepalive reconnection cycle - Resource Exhaustion Affected: >= 2.0.0, < 2.170.0 |
| CVE-2026-69200 | 3.7 | Sep 16 | node-opcua: Prototype Pollution via internal `fieldsToJson()` implementation (Related to CVE-2024-57086) Affected: < 2.145.0 |
Showing 4