CVE Tools
Track your stack

Node-js-foundation

138 CVEs across 26 months on the top 200 list since Sep 2016. Peak rank #59 in Sep 2016. None of them is in CISA KEV.

Node-js-foundation CVEs per month since Sep 2016

Dec 2021 to Nov 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 16, Jan 2026
Dec 2021: below the top 200 that month, 2 or fewer CVEsJan 2022: below the top 200 that month, 2 or fewer CVEsFeb 2022: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #111 · mostly Node.js, KarmaMar 2022: below the top 200 that month, 3 or fewer CVEsApr 2022: below the top 200 that month, 3 or fewer CVEsMay 2022: below the top 200 that month, 3 or fewer CVEsJun 2022: below the top 200 that month, 3 or fewer CVEsJul 2022: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #145 · mostly Node.js, MomentAug 2022: below the top 200 that month, 3 or fewer CVEsSep 2022: below the top 200 that month, 3 or fewer CVEsOct 2022: below the top 200 that month, 2 or fewer CVEsNov 2022: below the top 200 that month, 3 or fewer CVEsDec 2022: below the top 200 that month, 3 or fewer CVEsJan 2023: below the top 200 that month, 3 or fewer CVEsFeb 2023: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #130 · mostly Node.js, UndiciMar 2023: no snapshot, the run for this month failedApr 2023: 4 CVEs · 3 critical · 0 now in CISA KEV · rank #175 · mostly VM2, Node.jsMay 2023: below the top 200 that month, 3 or fewer CVEsJun 2023: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #175 · mostly Node.js, SemverJul 2023: 6 CVEs · 2 critical · 0 now in CISA KEV · rank #113 · mostly Node.js, VM2Aug 2023: 5 CVEs · 1 critical · 0 now in CISA KEV · rank #168 · mostly Node.jsSep 2023: below the top 200 that month, 3 or fewer CVEsOct 2023: below the top 200 that month, 4 or fewer CVEsNov 2023: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #195 · mostly Node.jsDec 2023: below the top 200 that month, 4 or fewer CVEsJan 2024: below the top 200 that month, 4 or fewer CVEsFeb 2024: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #105 · mostly Node.js, UndiciMar 2024: below the top 200 that month, 4 or fewer CVEsApr 2024: below the top 200 that month, 4 or fewer CVEsMay 2024: below the top 200 that month, 5 or fewer CVEsJun 2024: below the top 200 that month, 4 or fewer CVEsJul 2024: below the top 200 that month, 4 or fewer CVEsAug 2024: below the top 200 that month, 4 or fewer CVEsSep 2024: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #82 · mostly Node.jsOct 2024: below the top 200 that month, 4 or fewer CVEsNov 2024: below the top 200 that month, 4 or fewer CVEsDec 2024: below the top 200 that month, 3 or fewer CVEsJan 2025: below the top 200 that month, 4 or fewer CVEsFeb 2025: below the top 200 that month, 3 or fewer CVEsMar 2025: below the top 200 that month, 5 or fewer CVEsApr 2025: below the top 200 that month, 4 or fewer CVEsMay 2025: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #200 · mostly Node.jsJun 2025: below the top 200 that month, 4 or fewer CVEsJul 2025: below the top 200 that month, 5 or fewer CVEsAug 2025: below the top 200 that month, 4 or fewer CVEsSep 2025: below the top 200 that month, 4 or fewer CVEsOct 2025: below the top 200 that month, 4 or fewer CVEsNov 2025: below the top 200 that month, 4 or fewer CVEsDec 2025: below the top 200 that month, 5 or fewer CVEsJan 2026: 16 CVEs · 2 critical · 0 now in CISA KEV · rank #63 · mostly Node.js, Node-tar, Browserstack-localFeb 2026: below the top 200 that month, 5 or fewer CVEsMar 2026: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #183 · mostly Node.jsApr 2026: below the top 200 that month, 6 or fewer CVEsMay 2026: 16 CVEs · 12 critical · 0 now in CISA KEV · rank #74 · mostly VM2Jun 2026: below the top 200 that month, 7 or fewer CVEsJul 2026: below the top 200 that month, 7 or fewer CVEsAug 2026: below the top 200 that month, 8 or fewer CVEsSep 2026: below the top 200 that month, 9 or fewer CVEsOct 2026: below the top 200 that month, 11 or fewer CVEsNov 2026: below the top 200 that month, 3 or fewer CVEs

In the lens

The products that kept showing up in Node-js-foundation's monthly top three from Dec 2021 to Nov 2026. Move the lens and the list follows.

  1. Node.js6813 months
  2. VM2213 months
  3. Node-tar31 month
  4. Undici32 months
  5. Browserstack-local11 month
  6. Karma11 month
  7. Moment11 month
  8. Semver11 month

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#59 in Sep 2016
Busiest month
Jan 2026, 16 CVEs
Months with a KEV entry
0 of 26 on the list
On the top 200 list
26 of 106 monthly snapshots