Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2014-9748 — HIGH severity vulnerability | Release Alert

CVE-2014-9748

8.1

HIGHCVSS v3

Published

February 11, 2020

CVSS v2

6.8 MEDIUM

Affected

13 projects

Assigned by

MITRE

Severity scale

010

Description

The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cause a denial of service (deadlock) or possibly have unspecified other impact by leveraging a race condition.

GitHubNode.js JavaScript runtime ✨🐢🚀✨

NVD

GitHubCross-platform asynchronous I/O

< 1.7.4NVD

@externs/nodejs

NPM

More on this CVE

NVD↗GitHub Advisory↗

The Closure Compiler Externs For Node.JS.

>= 0.12.0, < 0.12.15, >= 0.10.0, < 0.10.46NVD

GitHubThe Externs For Node.JS.

>= 0.12.0, < 0.12.15, >= 0.10.0, < 0.10.46NVD

NPMMocks Of Built-In Node.JS Modules To Use For Compilation.

>= 0.12.0, < 0.12.15, >= 0.10.0, < 0.10.46NVD

@opencensus/nodejs

NPMOpenCensus is a toolkit for collecting application performance and behavior data.

>= 0.12.0, < 0.12.15, >= 0.10.0, < 0.10.46NVD

GitHubMocks Of Built-In Node.JS Modules To Use For Compilation.

>= 0.12.0, < 0.12.15, >= 0.10.0, < 0.10.46NVD

Python Package IndexPython bindings and utils for Node.js and io.js

>= 0.12.0, < 0.12.15, >= 0.10.0, < 0.10.46NVD

NPM

>= 0.12.0, < 0.12.15, >= 0.10.0, < 0.10.46NVD

NuGet GalleryNode.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient. Node.js' package ecosystem, npm, is the largest ecosystem of open source libraries in the world.

>= 0.12.0, < 0.12.15, >= 0.10.0, < 0.10.46NVD

NuGet GalleryMulti-platform support library with a focus on asynchronous I/O.

< 1.7.4NVD

RubyGemsAn opinionated wrapper around libuv for Ruby

< 1.7.4NVD

GitHubRuby bindings for libuv

< 1.7.4NVD