{"schema_version":1,"title":"Nodejs vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in Nodejs: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2023-30589, was published on 1 July 2023. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/nodejs","json_url":"https://junglewise.ai/threats/vendors/nodejs.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/nodejs","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":2,"all_time":9,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":0},"latest":[{"cve":"CVE-2023-30589","cvss":3.1,"epss":0.0391,"slug":"cve-2023-30589-llhttp-http-request-smuggling-via-improper-crlf-delimiters","title":"llhttp HTTP request smuggling via improper CRLF delimiters","severity":"low","exploited":false,"published_at":"2023-07-01T00:30:46+00:00","url":"https://junglewise.ai/threats/cve-2023-30589-llhttp-http-request-smuggling-via-improper-crlf-delimiters"},{"cve":"CVE-2022-32213","cvss":3.1,"epss":0.4408,"slug":"cve-2022-32213-llhttp-http-request-smuggling-via-flawed-transfer-encoding","title":"llhttp HTTP request smuggling via flawed Transfer-Encoding parsing","severity":"low","exploited":false,"published_at":"2022-07-15T00:00:18+00:00","url":"https://junglewise.ai/threats/cve-2022-32213-llhttp-http-request-smuggling-via-flawed-transfer-encoding"},{"cve":"CVE-2015-8860","cvss":7.5,"epss":0.0491,"slug":"cve-2015-8860-node-js-tar-arbitrary-file-write-via-symlink-attack","title":"Node.js tar arbitrary file write via symlink attack","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:00.69+00:00","url":"https://junglewise.ai/threats/cve-2015-8860-node-js-tar-arbitrary-file-write-via-symlink-attack"},{"cve":"CVE-2015-8855","cvss":7.5,"epss":0.0649,"slug":"cve-2015-8855-node-js-semver-regular-expression-denial-of-service","title":"Node.js semver Regular Expression Denial of Service","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:00.503+00:00","url":"https://junglewise.ai/threats/cve-2015-8855-node-js-semver-regular-expression-denial-of-service"},{"cve":"CVE-2014-9772","cvss":6.1,"epss":0.0264,"slug":"cve-2014-9772-node-js-validator-xss-filter-bypass-via-hex-encoding","title":"Node.js validator XSS filter bypass via hex encoding","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.33+00:00","url":"https://junglewise.ai/threats/cve-2014-9772-node-js-validator-xss-filter-bypass-via-hex-encoding"},{"cve":"CVE-2013-7454","cvss":6.1,"epss":0.0186,"slug":"cve-2013-7454-node-js-validator-xss-filter-bypass-via-nested-forbidden-strings","title":"Node.js validator XSS filter bypass via nested forbidden strings","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.267+00:00","url":"https://junglewise.ai/threats/cve-2013-7454-node-js-validator-xss-filter-bypass-via-nested-forbidden-strings"},{"cve":"CVE-2013-7453","cvss":6.1,"epss":0.0186,"slug":"cve-2013-7453-node-js-validator-xss-filter-bypass-via-ui-redressing","title":"Node.js validator XSS filter bypass via UI redressing","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.237+00:00","url":"https://junglewise.ai/threats/cve-2013-7453-node-js-validator-xss-filter-bypass-via-ui-redressing"},{"cve":"CVE-2013-7452","cvss":6.1,"epss":0.0205,"slug":"cve-2013-7452-node-js-validator-xss-filter-bypass-via-javascript-uri","title":"Node.js validator XSS filter bypass via javascript URI","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.207+00:00","url":"https://junglewise.ai/threats/cve-2013-7452-node-js-validator-xss-filter-bypass-via-javascript-uri"},{"cve":"CVE-2013-7451","cvss":6.1,"epss":0.0186,"slug":"cve-2013-7451-node-js-validator-xss-filter-bypass-via-nested-tags","title":"Node.js validator XSS filter bypass via nested tags","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.143+00:00","url":"https://junglewise.ai/threats/cve-2013-7451-node-js-validator-xss-filter-bypass-via-nested-tags"}],"vendor":{"hub":true,"name":"Nodejs","slug":"nodejs","homepage":"https://nodejs.org/","description":"An open-source, cross-platform JavaScript runtime environment that executes JavaScript code outside a web browser.","url":"https://junglewise.ai/threats/vendors/nodejs"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2015-8855","cvss":7.5,"epss":0.0649,"slug":"cve-2015-8855-node-js-semver-regular-expression-denial-of-service","title":"Node.js semver Regular Expression Denial of Service","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:00.503+00:00","url":"https://junglewise.ai/threats/cve-2015-8855-node-js-semver-regular-expression-denial-of-service"},{"cve":"CVE-2015-8860","cvss":7.5,"epss":0.0491,"slug":"cve-2015-8860-node-js-tar-arbitrary-file-write-via-symlink-attack","title":"Node.js tar arbitrary file write via symlink attack","severity":"high","exploited":false,"published_at":"2017-01-23T21:59:00.69+00:00","url":"https://junglewise.ai/threats/cve-2015-8860-node-js-tar-arbitrary-file-write-via-symlink-attack"},{"cve":"CVE-2014-9772","cvss":6.1,"epss":0.0264,"slug":"cve-2014-9772-node-js-validator-xss-filter-bypass-via-hex-encoding","title":"Node.js validator XSS filter bypass via hex encoding","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.33+00:00","url":"https://junglewise.ai/threats/cve-2014-9772-node-js-validator-xss-filter-bypass-via-hex-encoding"},{"cve":"CVE-2013-7452","cvss":6.1,"epss":0.0205,"slug":"cve-2013-7452-node-js-validator-xss-filter-bypass-via-javascript-uri","title":"Node.js validator XSS filter bypass via javascript URI","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.207+00:00","url":"https://junglewise.ai/threats/cve-2013-7452-node-js-validator-xss-filter-bypass-via-javascript-uri"},{"cve":"CVE-2013-7454","cvss":6.1,"epss":0.0186,"slug":"cve-2013-7454-node-js-validator-xss-filter-bypass-via-nested-forbidden-strings","title":"Node.js validator XSS filter bypass via nested forbidden strings","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.267+00:00","url":"https://junglewise.ai/threats/cve-2013-7454-node-js-validator-xss-filter-bypass-via-nested-forbidden-strings"},{"cve":"CVE-2013-7453","cvss":6.1,"epss":0.0186,"slug":"cve-2013-7453-node-js-validator-xss-filter-bypass-via-ui-redressing","title":"Node.js validator XSS filter bypass via UI redressing","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.237+00:00","url":"https://junglewise.ai/threats/cve-2013-7453-node-js-validator-xss-filter-bypass-via-ui-redressing"},{"cve":"CVE-2013-7451","cvss":6.1,"epss":0.0186,"slug":"cve-2013-7451-node-js-validator-xss-filter-bypass-via-nested-tags","title":"Node.js validator XSS filter bypass via nested tags","severity":"medium","exploited":false,"published_at":"2017-01-23T21:59:00.143+00:00","url":"https://junglewise.ai/threats/cve-2013-7451-node-js-validator-xss-filter-bypass-via-nested-tags"},{"cve":"CVE-2022-32213","cvss":3.1,"epss":0.4408,"slug":"cve-2022-32213-llhttp-http-request-smuggling-via-flawed-transfer-encoding","title":"llhttp HTTP request smuggling via flawed Transfer-Encoding parsing","severity":"low","exploited":false,"published_at":"2022-07-15T00:00:18+00:00","url":"https://junglewise.ai/threats/cve-2022-32213-llhttp-http-request-smuggling-via-flawed-transfer-encoding"},{"cve":"CVE-2023-30589","cvss":3.1,"epss":0.0391,"slug":"cve-2023-30589-llhttp-http-request-smuggling-via-improper-crlf-delimiters","title":"llhttp HTTP request smuggling via improper CRLF delimiters","severity":"low","exploited":false,"published_at":"2023-07-01T00:30:46+00:00","url":"https://junglewise.ai/threats/cve-2023-30589-llhttp-http-request-smuggling-via-improper-crlf-delimiters"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Nodejs Node.js","slug":"node-js","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/node-js"}]}