openjs foundation
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 101 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 20, 2015 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →CISA Confirms Active Exploitation of Node2Shell / HTTP2Shell
Broccoli2Shell: Brotli decoder RCE (CVE-2026-111497) in Node.js, Python and more
Upcoming Node.js security lease 2026/10/21
Wednesday, October 21, 2026 Security Releases
HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934)
node:sqlite SQLTagStore Iterator Replay Lets Attacker Re-Execute Victim-Bound Writes Indefinitely
Wednesday, July 29, 2026 Security Releases
Fwd: Node.js security updates for all active lease lines, June 2026
HTTP/2 sessions never clean up after GOAWAY on invalid protocol errors
Monitor openjs foundation in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.