PT-2025-4817 · Node.Js · Node.Js

Published

2025-01-21

·

Updated

2025-04-14

·

CVE-2025-23087

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The issue affects Node.js, specifically all end-of-life versions up to v17.9.1, which no longer receive support or updates, including security patches. This can expose systems to potential security risks due to unaddressed software vulnerabilities or dependencies. The vulnerable versions of Node.js include all end-of-life versions up to v17.9.1. Users are recommended to upgrade to a supported version to prevent potential security risks. An exploit for this issue can be found through various online links. The continued use of end-of-life versions may expose systems to potential security risks due to unaddressed software vulnerabilities or dependencies, such as the use of unmaintained third-party components. #Nodejs #EOL #SecurityRisks #SoftwareVulnerabilities #SecurityPatches #NodejsVersions #SecurityUpdates #EndOfLifeVersions #NodejsSecurity

Fix

Weakness Enumeration

CWE-1104

Related Identifiers

BIT-NODE-2025-23087
BIT-NODE-MIN-2025-23087
CVE-2025-23087

Affected Products

Node.Js