Node.js Multiple Vulnerabilities

Impact

• Denial of Service
• Security Restriction Bypass

System / Technologies affected

• Node.js versions prior to 20.20.2 (LTS)
• Node.js versions prior to 22.22.2 (LTS)
• Node.js versions prior to 24.14.1 (LTS)
• Node.js versions prior to 25.8.2 (Current)

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Update to Node.js version 20.20.2 (LTS)
• Update to Node.js version 22.22.2 (LTS)
• Update to Node.js version 24.14.1 (LTS)
• Update to Node.js version 25.8.2 (Current)

Vulnerability Identifier

• CVE-2026-21637
• CVE-2026-21710
• CVE-2026-21711
• CVE-2026-21712
• CVE-2026-21713
• CVE-2026-21714
• CVE-2026-21715
• CVE-2026-21716
• CVE-2026-21717

Source

• Node.js

Related Link

• https://nodejs.org/en/blog/vulnerability/march-2026-security-releases
• https://nodejs.org/en/blog/release/v20.20.2
• https://nodejs.org/en/blog/release/v22.22.2
• https://nodejs.org/en/blog/release/v24.14.1
• https://nodejs.org/en/blog/release/v25.8.2