CVE Tools
Track your stack

Node-js-foundation

138 CVEs across 26 months on the top 200 list since Sep 2016. Peak rank #59 in Sep 2016. None of them is in CISA KEV.

Node-js-foundation CVEs per month since Sep 2016

Jun 2021 to May 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 16, Jan 2026
Jun 2021: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #167 · mostly Is-svg, Striptags, Color-stringJul 2021: not on the top 200 that monthAug 2021: 9 CVEs · 1 critical · 0 now in CISA KEV · rank #75 · mostly Node-tar, Node.jsSep 2021: not on the top 200 that monthOct 2021: not on the top 200 that monthNov 2021: 3 CVEs · 1 critical · 0 now in CISA KEV · rank #141 · mostly Node.jsDec 2021: not on the top 200 that monthJan 2022: not on the top 200 that monthFeb 2022: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #111 · mostly Node.js, KarmaMar 2022: not on the top 200 that monthApr 2022: not on the top 200 that monthMay 2022: not on the top 200 that monthJun 2022: not on the top 200 that monthJul 2022: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #145 · mostly Node.js, MomentAug 2022: not on the top 200 that monthSep 2022: not on the top 200 that monthOct 2022: not on the top 200 that monthNov 2022: not on the top 200 that monthDec 2022: not on the top 200 that monthJan 2023: not on the top 200 that monthFeb 2023: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #130 · mostly Node.js, UndiciMar 2023: not on the top 200 that monthApr 2023: 4 CVEs · 3 critical · 0 now in CISA KEV · rank #175 · mostly VM2, Node.jsMay 2023: not on the top 200 that monthJun 2023: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #175 · mostly Node.js, SemverJul 2023: 6 CVEs · 2 critical · 0 now in CISA KEV · rank #113 · mostly Node.js, VM2Aug 2023: 5 CVEs · 1 critical · 0 now in CISA KEV · rank #168 · mostly Node.jsSep 2023: not on the top 200 that monthOct 2023: not on the top 200 that monthNov 2023: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #195 · mostly Node.jsDec 2023: not on the top 200 that monthJan 2024: not on the top 200 that monthFeb 2024: 7 CVEs · 1 critical · 0 now in CISA KEV · rank #105 · mostly Node.js, UndiciMar 2024: not on the top 200 that monthApr 2024: not on the top 200 that monthMay 2024: not on the top 200 that monthJun 2024: not on the top 200 that monthJul 2024: not on the top 200 that monthAug 2024: not on the top 200 that monthSep 2024: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #82 · mostly Node.jsOct 2024: not on the top 200 that monthNov 2024: not on the top 200 that monthDec 2024: not on the top 200 that monthJan 2025: not on the top 200 that monthFeb 2025: not on the top 200 that monthMar 2025: not on the top 200 that monthApr 2025: not on the top 200 that monthMay 2025: 4 CVEs · 0 critical · 0 now in CISA KEV · rank #200 · mostly Node.jsJun 2025: not on the top 200 that monthJul 2025: not on the top 200 that monthAug 2025: not on the top 200 that monthSep 2025: not on the top 200 that monthOct 2025: not on the top 200 that monthNov 2025: not on the top 200 that monthDec 2025: not on the top 200 that monthJan 2026: 16 CVEs · 2 critical · 0 now in CISA KEV · rank #63 · mostly Node.js, Node-tar, Browserstack-localFeb 2026: not on the top 200 that monthMar 2026: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #183 · mostly Node.jsApr 2026: not on the top 200 that monthMay 2026: 16 CVEs · 12 critical · 0 now in CISA KEV · rank #74 · mostly VM2

In the lens

The products that kept showing up in Node-js-foundation's monthly top three from Jun 2021 to May 2026. Move the lens and the list follows.

  1. Node.js7515 months
  2. VM2213 months
  3. Node-tar82 months
  4. Undici32 months
  5. Browserstack-local11 month
  6. Color-string11 month
  7. Is-svg11 month
  8. Karma11 month
  9. Moment11 month
  10. Semver11 month

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#59 in Sep 2016
Busiest month
Jan 2026, 16 CVEs
Months with a KEV entry
0 of 26 on the list
On the top 200 list
26 of 117 monthly snapshots

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store