{"product":"nodejs","productName":"Node.js","version":"19.9.0","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2023-06-01","cycle":"19"},"counts":{"critical":2,"high":22,"medium":14,"low":5,"unknown":7},"vulnerabilities":[{"id":"CVE-2024-3566","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/"},{"id":"CVE-2023-32002","severity":"critical","score":9.8,"kev":false,"fixedIn":"20.5.1","advisoryUrl":"https://hackerone.com/reports/1960870"},{"id":"CVE-2023-32006","severity":"high","score":8.8,"kev":false,"fixedIn":"20.5.1","advisoryUrl":"https://hackerone.com/reports/2043807"},{"id":"CVE-2023-32004","severity":"high","score":8.8,"kev":false,"fixedIn":"20.5.1","advisoryUrl":"https://hackerone.com/reports/2038134"},{"id":"CVE-2024-27983","severity":"high","score":8.2,"kev":false,"fixedIn":"20.12.1","advisoryUrl":"https://hackerone.com/reports/2319584"},{"id":"CVE-2024-36138","severity":"high","score":8.1,"kev":false,"fixedIn":"20.15.1","advisoryUrl":"https://nodejs.org/en/blog/vulnerability/july-2024-security-releases"},{"id":"CVE-2024-27980","severity":"high","score":8.1,"kev":false,"fixedIn":"20.12.2","advisoryUrl":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/"},{"id":"CVE-2024-21896","severity":"high","score":7.9,"kev":false,"fixedIn":"20.11.1","advisoryUrl":"https://hackerone.com/reports/2218653"},{"id":"CVE-2024-21891","severity":"high","score":7.9,"kev":false,"fixedIn":"20.11.1","advisoryUrl":"https://hackerone.com/reports/2259914"},{"id":"CVE-2025-23083","severity":"high","score":7.7,"kev":false,"fixedIn":"20.18.2","advisoryUrl":"https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"}],"moreVulnerabilities":40,"upgrade":{"recommended":"22.23.4"},"notes":[],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T21:52:50.879Z"}