CVE-2025-23088
nodejs: End-of-Life Node.js Versions Pose Security Risks 19.x
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · January 22, 2025
Updated · June 30, 2026
Description
A flaw was found in Node.js. This vulnerability allows potential exposure to unaddressed software vulnerabilities via the continued use of End-of-Life (EOL) versions that no longer receive security updates or patches.
Statement
This CVE has been marked as Rejected by the assigning CNA.
Red Hat Enterprise Linux is not impacted by this CVE, as it does not include or ship any End-of-Life (EOL) versions of Node.js in its supported repositories. Red Hat ensures that all components provided in its distributions are actively maintained and receive necessary updates, including security patches, to mitigate vulnerabilities and maintain system security.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1104 · Use of Unmaintained Third Party Components