22Oca
CVE-2025-23089 | Node.js up to 21.7.3 unmaintained third party components
A vulnerability has been found in Node.js up to 21.7.3 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to use of unmaintained third party components. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is known as CVE-2025-23089. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.