# Nodejs Node.js


- [CVE-2026-111497](https://insights.sbomify.com/CVE-2026-111497/): Google Brotli Unchecked Return Value (critical 9.2, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2015-0278](https://insights.sbomify.com/CVE-2015-0278/): Privilege escalation in n/a (critical 10.0)
- [CVE-2024-3566](https://insights.sbomify.com/CVE-2024-3566/): Command injection vulnerability in programing languages on Microsoft Windows operating system. (critical 9.8)
- [CVE-2023-39332](https://insights.sbomify.com/CVE-2023-39332/): Path traversal in Node (critical 9.8)
- [CVE-2023-32002](https://insights.sbomify.com/CVE-2023-32002/): Security feature bypass in Node (critical 9.8)
- [CVE-2021-22930](https://insights.sbomify.com/CVE-2021-22930/): Use After Free in node.js (critical 9.8)
- [CVE-2021-22931](https://insights.sbomify.com/CVE-2021-22931/): Code injection in Node (critical 9.8)
- [CVE-2019-15605](https://insights.sbomify.com/CVE-2019-15605/): Other in Node (critical 9.8)
- [CVE-2019-15606](https://insights.sbomify.com/CVE-2019-15606/): Auth bypass in Node (critical 9.8)
- [CVE-2016-9841](https://insights.sbomify.com/CVE-2016-9841/): Memory corruption in n/a (critical 9.8)
- [CVE-2016-9843](https://insights.sbomify.com/CVE-2016-9843/): Other in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/nodejs/node.js/