Security feed

25 October 2026

Unrated

CVE-2015-8027 Denial of Service Vulnerability / CVE-2015-6764 V8 Out-of-bounds Access Vulnerability

Type: advisorySource: Node.js announcements25 Oct 2026, 22:59 UTC

The announcement describes a denial-of-service vulnerability affecting Node.js v0.12.x through v5.x and a V8 out-of-bounds access vulnerability affecting v4.x and v5.x when user-supplied JavaScript can be executed. It…

Products: Node.jsCVEs: CVE-2015-8027, CVE-2015-6764

Unrated

Node.js security release planned for December 1 or 2, 2015

Type: advisorySource: Node.js announcements25 Oct 2026, 22:24 UTC

The announcement says upcoming Node.js releases will include fixes for CVE-2015-8027 across v0.12.x, v4.x, and v5.x, and for CVE-2015-6764 in v4.x and v5.x. It does not specify fixed versions.

Products: Node.jsCVEs: CVE-2015-8027, CVE-2015-6764

Unrated

December Security Release Schedule Update

Type: advisorySource: Node.js announcements25 Oct 2026, 22:21 UTC

Node.js postponed its planned security releases to include upstream OpenSSL fixes and announced vulnerabilities affecting several Node.js release lines. Fixes were planned for v4.x and v5.x for CVE-2015-6764, alongsid…

Products: Node.jsCVEs: CVE-2015-8027, CVE-2015-6764