All apps
N

Node.js

Runtime
OpenJS Foundation·Website

JavaScript runtime built on V8 — LTS and Current lines

Latest versions

Stable
WindowsmacOSLinux
24.19.03 Aug 2026
Current
WindowsmacOSLinux
26.7.05 Aug 2026
Actively exploited
0
CISA KEV · 1 lifetime
Affecting latest
0
v24.19.0
Known CVEs
173
across all versions, as matched by PemSync
Last checked
16 Aug 2026, 22:15

The latest tracked version (24.19.0) is not affected by any matched vulnerability — all 173 recorded CVEs are fixed in versions you're past.

CVESeverityEPSS pctStatusScore source
HIGH 7.5100%Latest not affectedNVD10 Oct 2023
5%Latest not affected26 Jun 2026
8%Latest not affected26 Jun 2026
18%Latest not affected26 Jun 2026
HIGH 7.589%Latest not affectedCNA26 Jun 2026
25%Latest not affected26 Jun 2026
12%Latest not affected26 Jun 2026
48%Latest not affected26 Jun 2026
HIGH 7.787%Latest not affectedCNA26 Jun 2026
35%Latest not affected26 Jun 2026
28%Latest not affected22 Jun 2026
62%Latest not affected20 Jan 2026
49%Latest not affected20 Jan 2026
47%Latest not affected20 Jan 2026
89%Latest not affected20 Jan 2026
14%Latest not affected20 Jan 2026
14%Latest not affected20 Jan 2026
74%Latest not affected20 Jan 2026
70%Latest not affected28 Jan 2025
93%Latest not affected10 Apr 2024
87%Latest not affected20 Feb 2024
67%Latest not affected20 Feb 2024
44%Latest not affected20 Feb 2024
67%Latest not affected20 Feb 2024
58%Latest not affected20 Feb 2024
Showing 125 of 173
Page 1 of 7

PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.