CVE-2014-7192: Joyent Node.js

High severity, CVSS 10.0. EPSS: 13% chance of exploitation in the next 30 days.

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.

Affected products

• Joyent Node.js: up to and including 0.10.32

Published 2014-12-11. Last modified 2026-06-17.