{"product":"nodejs","productName":"Node.js","version":"16.20.2","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2023-09-11","cycle":"16"},"counts":{"critical":1,"high":16,"medium":13,"low":5,"unknown":2},"vulnerabilities":[{"id":"CVE-2024-3566","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/"},{"id":"CVE-2024-27983","severity":"high","score":8.2,"kev":false,"fixedIn":"18.20.1","advisoryUrl":"https://hackerone.com/reports/2319584"},{"id":"CVE-2024-36138","severity":"high","score":8.1,"kev":false,"fixedIn":"18.20.4","advisoryUrl":"https://nodejs.org/en/blog/vulnerability/july-2024-security-releases"},{"id":"CVE-2024-27980","severity":"high","score":8.1,"kev":false,"fixedIn":"18.20.2","advisoryUrl":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/"},{"id":"CVE-2024-21896","severity":"high","score":7.9,"kev":false,"fixedIn":"20.11.1","advisoryUrl":"https://hackerone.com/reports/2218653"},{"id":"CVE-2024-21891","severity":"high","score":7.9,"kev":false,"fixedIn":"20.11.1","advisoryUrl":"https://hackerone.com/reports/2259914"},{"id":"CVE-2025-23083","severity":"high","score":7.7,"kev":false,"fixedIn":"20.18.2","advisoryUrl":"https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"},{"id":"CVE-2023-39331","severity":"high","score":7.7,"kev":false,"fixedIn":"20.8.1","advisoryUrl":"https://hackerone.com/reports/2092852"},{"id":"CVE-2026-21710","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://nodejs.org/en/blog/vulnerability/march-2026-security-releases"},{"id":"CVE-2025-59465","severity":"high","score":7.5,"kev":false,"advisoryUrl":"https://nodejs.org/en/blog/vulnerability/december-2025-security-releases"}],"moreVulnerabilities":27,"upgrade":{"recommended":"22.23.4"},"notes":[],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T21:52:50.879Z"}