{"product":"nodejs","productName":"Node.js","version":"5.12.0","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2016-06-30","cycle":"5"},"counts":{"critical":3,"high":27,"medium":17,"low":5,"unknown":38},"vulnerabilities":[{"id":"CVE-2024-3566","severity":"critical","score":9.8,"kev":false,"advisoryUrl":"https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/"},{"id":"CVE-2023-32002","severity":"critical","score":9.8,"kev":false,"fixedIn":"16.20.2","advisoryUrl":"https://hackerone.com/reports/1960870"},{"id":"CVE-2022-35255","severity":"critical","score":9.1,"kev":false,"fixedIn":"18.9.1","advisoryUrl":"https://www.debian.org/security/2023/dsa-5326"},{"id":"CVE-2023-32006","severity":"high","score":8.8,"kev":false,"fixedIn":"16.20.2","advisoryUrl":"https://hackerone.com/reports/2043807"},{"id":"CVE-2023-32004","severity":"high","score":8.8,"kev":false,"fixedIn":"20.5.1","advisoryUrl":"https://hackerone.com/reports/2038134"},{"id":"CVE-2024-27983","severity":"high","score":8.2,"kev":false,"fixedIn":"18.20.1","advisoryUrl":"https://hackerone.com/reports/2319584"},{"id":"CVE-2024-36138","severity":"high","score":8.1,"kev":false,"fixedIn":"18.20.4","advisoryUrl":"https://nodejs.org/en/blog/vulnerability/july-2024-security-releases"},{"id":"CVE-2024-27980","severity":"high","score":8.1,"kev":false,"fixedIn":"18.20.2","advisoryUrl":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MZN6PFXHTCCUENAKZXTGWPKUAHI6E2W/"},{"id":"CVE-2022-43548","severity":"high","score":8.1,"kev":false,"fixedIn":"14.21.1","advisoryUrl":"https://www.debian.org/security/2023/dsa-5326"},{"id":"CVE-2024-21896","severity":"high","score":7.9,"kev":false,"fixedIn":"20.11.1","advisoryUrl":"https://hackerone.com/reports/2218653"}],"moreVulnerabilities":80,"upgrade":{"recommended":"22.23.4"},"notes":[],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T20:37:50.572Z"}