22Oca
CVE-2025-23088 | Node.js up to 19.9.0 unmaintained third party components
A vulnerability, which was classified as critical, was found in Node.js up to 19.9.0. Affected is an unknown function. The manipulation leads to use of unmaintained third party components. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is traded as CVE-2025-23088. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.