Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
SUSE has released an important patch for Node.js 16, addressing 31 vulnerabilities, including CVE-2025-23085 and CVE-2025-23166, which could lead to memory leaks and process crashes. The vulnerabilities affect various SUSE Linux Enterprise Server versions and could expose in-process secrets and caus...
openSUSE Leap 15.6 has released a security advisory addressing multiple vulnerabilities in Node.js 22. Key issues include a resource exhaustion vulnerability (CVE-2026-22036) and denial of service due to TLS error handling bypass (CVE-2026-21637), affecting users of the platform. Additional fixes al...
On January 13, 2026, Node.js released critical security updates to patch seven vulnerabilities across all supported versions. The updates address high-severity flaws that could lead to memory leaks, denial-of-service attacks, and permission bypasses, urging immediate upgrades for affected systems. A...
SUSE and openSUSE have released an important security update for Node.js 20, addressing several vulnerabilities. The update includes fixes for issues such as unsafe buffer creation and error handling in TLSSocket, affecting users of Node.js 20. Key CVEs include CVE-2026-22036 and CVE-2025-59465, amo...