{"api_version":"v1","generated_at":"2026-10-04T09:20:00+00:00","product":{"cve_count":16,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-the-node-js-project-node-js-9703189bcbca","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/node.js","name":"Node.js","next_cursor":null,"observations":[{"affected":"All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0","affected_versions_present":true,"cve_id":"CVE-2018-12123","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-12123","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-12-13T13:09:21.262Z","patch_url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","primary_source":"","published":"2018-11-28T17:00:00.000Z"},{"affected":"All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0","affected_versions_present":true,"cve_id":"CVE-2018-12122","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-12122","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-12-13T13:09:20.260Z","patch_url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","primary_source":"","published":"2018-11-28T17:00:00.000Z"},{"affected":"All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0","affected_versions_present":true,"cve_id":"CVE-2018-12121","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-12121","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-12-27T16:02:58.114Z","patch_url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","primary_source":"","published":"2018-11-28T17:00:00.000Z"},{"affected":"All versions prior to Node.js 6.15.0","affected_versions_present":true,"cve_id":"CVE-2018-12120","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-12120","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T08:24:03.745Z","patch_url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","primary_source":"","published":"2018-11-28T17:00:00.000Z"},{"affected":"All versions prior to Node.js 6.15.0 and 8.14.0","affected_versions_present":true,"cve_id":"CVE-2018-12116","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-12116","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-08-05T08:24:03.673Z","patch_url":"https://nodejs.org/en/blog/vulnerability/november-2018-security-releases/","primary_source":"","published":"2018-11-28T17:00:00.000Z"},{"affected":"All versions of Node.js 10 prior to 10.9.0","affected_versions_present":true,"cve_id":"CVE-2018-7166","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-7166","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T00:26:00.258Z","patch_url":"","primary_source":"","published":"2018-08-21T13:00:00.000Z"},{"affected":"All versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0","affected_versions_present":true,"cve_id":"CVE-2018-12115","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-12115","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T16:48:58.679Z","patch_url":"","primary_source":"","published":"2018-08-21T13:00:00.000Z"},{"affected":"6.x+; 8.x+; 9.x+; 10.x+","affected_versions_present":true,"cve_id":"CVE-2018-7167","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-7167","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T02:00:52.959Z","patch_url":"","primary_source":"","published":"2018-06-13T16:00:00.000Z"},{"affected":"9.7.X+; 10.x+","affected_versions_present":true,"cve_id":"CVE-2018-7164","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-7164","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T00:56:13.228Z","patch_url":"","primary_source":"","published":"2018-06-13T16:00:00.000Z"},{"affected":"9.x+; 10.x+","affected_versions_present":true,"cve_id":"CVE-2018-7162","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-7162","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T19:46:23.920Z","patch_url":"","primary_source":"","published":"2018-06-13T16:00:00.000Z"},{"affected":"8.x+; 9.x+; 10.x+","affected_versions_present":true,"cve_id":"CVE-2018-7161","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-7161","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-09-17T01:06:27.892Z","patch_url":"https://nodejs.org/en/blog/vulnerability/june-2018-security-releases/","primary_source":"","published":"2018-06-13T16:00:00.000Z"},{"affected":"^6.0.0 || ^8.0.0 || ^9.0.0","affected_versions_present":true,"cve_id":"CVE-2018-7160","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-7160","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T01:35:37.449Z","patch_url":"","primary_source":"","published":"2018-05-17T14:00:00.000Z"},{"affected":"4.x; 6.x; 8.x; 9.x","affected_versions_present":true,"cve_id":"CVE-2018-7159","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-7159","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T01:06:04.658Z","patch_url":"","primary_source":"","published":"2018-05-17T14:00:00.000Z"},{"affected":"4.x","affected_versions_present":true,"cve_id":"CVE-2018-7158","cve_url":"https://cve.blacktree.nl/cve/CVE-2018-7158","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T16:48:51.289Z","patch_url":"","primary_source":"","published":"2018-05-17T14:00:00.000Z"},{"affected":"8.0 and higher; 9.0 and higher","affected_versions_present":true,"cve_id":"CVE-2017-15897","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-15897","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T03:42:59.193Z","patch_url":"","primary_source":"","published":"2017-12-11T21:00:00.000Z"},{"affected":"4.0.0 and higher; 6.0.0 and higher; 8.0.0 and higher; 9.0.0 and higher","affected_versions_present":true,"cve_id":"CVE-2017-15896","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-15896","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-16T19:50:49.572Z","patch_url":"","primary_source":"","published":"2017-12-11T21:00:00.000Z"}],"source_generated_at":"2026-10-04T06:24:23.053Z","vendor":"The Node.js Project"}}