{"items":[{"id":"CVE-2024-3566","published":"2024-04-10T15:22:56.099Z","updated":"2025-11-18T17:35:41.547Z","title":"Command injection vulnerability in programing languages on Microsoft Windows operating system.","severity":"CRITICAL","score":9.8,"vendor":"Node.js","product":"Node.js","kev":false,"epss":0.06827,"kevAdded":null},{"id":"CVE-2019-5739","published":"2019-03-28T16:27:34.000Z","updated":"2024-08-04T20:01:52.297Z","title":"Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated…","severity":"HIGH","score":7.5,"vendor":"Node.js","product":"Node.js","kev":false,"epss":0.04929,"kevAdded":null},{"id":"CVE-2019-5737","published":"2019-03-28T16:20:28.000Z","updated":"2024-08-04T20:01:52.386Z","title":"In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by…","severity":"HIGH","score":7.5,"vendor":"Node.js","product":"Node.js","kev":false,"epss":0.16184,"kevAdded":null},{"id":"CVE-2018-1002204","published":"2018-07-25T17:00:00.000Z","updated":"2024-08-05T12:47:57.468Z","title":"adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip…","severity":"MEDIUM","score":5.5,"vendor":"node.js","product":"adm-zip","kev":false,"epss":0.13454,"kevAdded":null},{"id":"CVE-2018-1002203","published":"2018-07-25T17:00:00.000Z","updated":"2024-09-16T20:27:06.223Z","title":"unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip…","severity":"MEDIUM","score":5.5,"vendor":"node.js","product":"unzipper","kev":false,"epss":0.10553,"kevAdded":null}]}