Node.js 16
Support for Node.js 16 ended on 11/09/2023. There are no more security updates for this branch.
Latest version: 16.20.2, released on 09/08/2023
End of support: 11/09/2023
10 known vulnerabilities open in 16.20.2
Vulnerabilities in Node.js 16
42 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.
- CVE-2026-111497, CVSS 4.0: 9.2, actively exploited: still open in 16.20.2
- CVE-2024-3566, CVSS 3.1: 9.8: still open in 16.20.2
- CVE-2026-21710, CVSS 3.1: 7.5: still open in 16.20.2
- CVE-2026-21637, CVSS 3.1: 7.5: still open in 16.20.2
- CVE-2026-21717, CVSS 3.1: 5.9: still open in 16.20.2
- CVE-2026-21713, CVSS 3.0: 5.9: still open in 16.20.2
- CVE-2026-21714, CVSS 3.0: 5.3: still open in 16.20.2
- CVE-2026-21711, CVSS 3.0: 5.3: still open in 16.20.2
- CVE-2026-21716, CVSS 3.0: 3.3: still open in 16.20.2
- CVE-2026-21715, CVSS 3.0: 3.3: still open in 16.20.2
- CVE-2023-32002, CVSS 3.1: 9.8: not affected in 16.20.2
- CVE-2021-22931, CVSS 3.1: 9.8: fixed in 16.6.2
- CVE-2021-22930, CVSS 3.1: 9.8: fixed in 16.6.0
- CVE-2022-35255, CVSS 3.1: 9.1: fixed in 16.17.1
- CVE-2023-32006, CVSS 3.1: 8.8: not affected in 16.20.2
- CVE-2022-21824, CVSS 3.1: 8.2: fixed in 16.13.2
- CVE-2022-43548, CVSS 3.1: 8.1: fixed in 16.18.1
- CVE-2022-32212, CVSS 3.1: 8.1: fixed in 16.17.1
- CVE-2021-22921, CVSS 3.1: 7.8: fixed in 16.4.1
- CVE-2023-32559, CVSS 3.1: 7.5: not affected in 16.20.2
- CVE-2023-30590, CVSS 3.1: 7.5: fixed in 16.20.1
- CVE-2023-30589, CVSS 3.1: 7.5: fixed in 16.20.1
- CVE-2023-30585, CVSS 3.1: 7.5: fixed in 16.20.1
- CVE-2023-30581, CVSS 3.1: 7.5: fixed in 16.20.1
- CVE-2023-23919, CVSS 3.1: 7.5: fixed in 16.19.1
- CVE-2023-23918, CVSS 3.1: 7.5: fixed in 16.19.1
- CVE-2022-0778, CVSS 3.1: 7.5: fixed in 16.14.2
- CVE-2021-22940, CVSS 3.1: 7.5: fixed in 16.6.2
- CVE-2021-44531, CVSS 3.1: 7.4: fixed in 16.13.2
- CVE-2022-32223, CVSS 3.1: 7.3: fixed in 16.16.0
- CVE-2022-35256, CVSS 3.1: 6.5: fixed in 16.17.1
- CVE-2022-32215, CVSS 3.1: 6.5: fixed in 16.16.0
- CVE-2022-32214, CVSS 3.1: 6.5: fixed in 16.16.0
- CVE-2022-32213, CVSS 3.1: 6.5: fixed in 16.17.1
- CVE-2021-3672, CVSS 3.1: 5.6: fixed in 16.6.2
- CVE-2023-23936, CVSS 3.1: 5.4: fixed in 16.19.1
- CVE-2023-30588, CVSS 3.1: 5.3: fixed in 16.20.1
- CVE-2021-44533, CVSS 3.1: 5.3: fixed in 16.13.2
- CVE-2021-44532, CVSS 3.1: 5.3: fixed in 16.13.2
- CVE-2021-22939, CVSS 3.1: 5.3: fixed in 16.6.2
- CVE-2021-22918, CVSS 3.1: 5.3: fixed in 16.4.1
- CVE-2023-23920, CVSS 3.1: 4.2: fixed in 16.19.1
2 vulnerabilities of Node.js have no version information in the NVD and are not assigned to any branch.
Get notified
Add Node.js with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Node.js 16