267 CVEs affecting Node.js products, 1 known to be exploited (CISA KEV), with EPSS scores. Most affected: Node.js, Undici, Node, Node.js.