CVE-2025-23087

node.js: End-of-Life Node.js Versions Pose Security Risks 17.x or prior

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · January 22, 2025

Updated · June 30, 2026

Description

A flaw was found in Node.js. This vulnerability allows potential exposure to unaddressed software vulnerabilities via the continued use of End-of-Life (EOL) versions that no longer receive security updates or patches.

Statement

This CVE has been marked as Rejected by the assigning CNA.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1104 · Use of Unmaintained Third Party Components