주요 제품 취약점 (24건)

"Node.js" 관련 CVE만 표시 중 · 필터 해제 ×

기술	CVE	심각도	유형	KEV	등재일
Node.js Fortinet FortiOS and FortiProxy An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy ver…	CVE-2024-55591	9.8	CWE-288	KEV	2025-01-14
Node.js Npm package System Information Library for Node.JS The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware,…	CVE-2021-21315	7.1	CWE-78	KEV	2022-01-18
Node.js Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the data…	CVE-2026-26980	9.4	CWE-89		—
Node.js A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape d…	CVE-2026-78557	8.3	CWE-79		—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before v…	CVE-2026-107302	7.5	CWE-125		—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each comple…	CVE-2026-107300	7.5	CWE-674		—
Node.js Authentication bypass by capture-replay in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to perform spoofing ov…	CVE-2026-84003	7.4	CWE-294		—
Node.js Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, he fix for no_proxy hostname normalization bypass is in…	CVE-2026-42038	6.8	CWE-918		—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, constructing msgpack5 with an empty or partial options object di…	CVE-2026-107301	6.5	CWE-1321		—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 …	CVE-2026-107299	5.9	CWE-228		—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder reparses an incomplete array or map from t…	CVE-2026-107297	5.9	CWE-407		—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, al…	CVE-2026-107298	5.3	CWE-674		—
Node.js msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the correspon…	CVE-2026-107296	3.7	CWE-471		—
Node.js Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bi…	CVE-2026-83745	—	CWE-130		—
Node.js Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that…	CVE-2026-69264	—	CWE-94		—
Node.js Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/ag…	CVE-2026-69255	—	CWE-94		—
Node.js Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to version 3.1.3, several custom-tool compo…	CVE-2026-69253	—	CWE-95		—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited se…	CVE-2026-101909	—	CWE-1321		—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect p…	CVE-2026-101907	—	CWE-441		—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot …	CVE-2026-101906	—	CWE-400		—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies re…	CVE-2026-101905	—	CWE-441		—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters o…	CVE-2026-101903	—	CWE-1333		—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not install adequate error handling fo…	CVE-2026-101901	—	CWE-400		—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply pr…	CVE-2026-101898	—	CWE-918		—