All apps
N

Node.js

Runtime
OpenJS Foundation·Website

JavaScript runtime built on V8 — LTS and Current lines

Latest versions

Stable
WindowsmacOSLinux
24.22.014 Oct 2026
Current
WindowsLinuxmacOS
26.12.014 Oct 2026
Actively exploited
0
CISA KEV · 1 lifetime
Affecting latest
0
v24.22.0
Known CVEs
186
across all versions, as matched by PemSync
Last checked
21 Oct 2026, 4:42

The latest tracked version (24.22.0) is not affected by any matched vulnerability — all 186 recorded CVEs are fixed in versions you're past.

CVESeverityEPSS pctStatusScore source
HIGH 7.5100%Latest not affectedNVD10 Oct 2023
—4%Latest not affected—30 Jul 2026
—0%Latest not affected—30 Jul 2026
—5%Latest not affected—30 Jul 2026
—3%Latest not affected—26 Jun 2026
—8%Latest not affected—26 Jun 2026
—16%Latest not affected—26 Jun 2026
HIGH 7.590%Latest not affectedCNA26 Jun 2026
—24%Latest not affected—26 Jun 2026
—11%Latest not affected—26 Jun 2026
—50%Latest not affected—26 Jun 2026
HIGH 7.788%Latest not affectedCNA26 Jun 2026
—33%Latest not affected—26 Jun 2026
—27%Latest not affected—22 Jun 2026
—46%Latest not affected—18 Jun 2026
—23%Latest not affected—18 Jun 2026
—18%Latest not affected—30 Mar 2026
—4%Latest not affected—30 Mar 2026
—5%Latest not affected—30 Mar 2026
—38%Latest not affected—30 Mar 2026
—31%Latest not affected—30 Mar 2026
—7%Latest not affected—30 Mar 2026
—98%Latest not affected—30 Mar 2026
—24%Latest not affected—30 Mar 2026
—66%Latest not affected—20 Jan 2026
Showing 1–25 of 186
Page 1 of 8

PemSync reports known, cataloged exploited vulnerabilities (CISA KEV) and published CVEs. It is not a zero-day detection or threat-intelligence system — a vulnerability may be exploited before it appears here. Absence of data does not mean an app is secure.