Node.js health inspection: grade C · pwned.coffee

Skip to content

Node.js on the menu

Health inspection C Node.js 1 ticket 86'd Inspected live by pwned.coffee

What the inspector found

Node.js5 min Node2Shell RCE Exploit public PoCcritical severity
Do now Restrict untrusted input reaching Node.js Brotli decompression until a fix is released. Advisory
Node.js2 d Brotli Decoder Bug critical severity
Fix available. Upgrade to the vendor's patched release. Advisory

How grades work

FSomething is exploited and has no fix.
DSomething is exploited, but a fix exists.
CSomething has no fix yet, or three or more criticals are on the rail.
BHigh or critical fixes are waiting to be carried.
ANothing serious on the rail.

Put it on your README:

[![Node.js grade on pwned.coffee](https://pwned.coffee/badge/node.svg?grade=1)](https://pwned.coffee/grade/node)