# Node js vul. detedted in kibana
**URL:** https://discuss.elastic.co/t/node-js-vul-detedted-in-kibana/381039
**Category:** Kibana
**Created:** [August 14, 2025, 11:54am UTC](https://discuss.elastic.co/t/node-js-vul-detedted-in-kibana/381039 "2025-08-14T11:54:03Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Ekta](https://discuss.elastic.co/u/Ekta)
#### Post date: [August 14, 2025, 11:54am UTC](https://discuss.elastic.co/t/node-js-vul-detedted-in-kibana/381039/1 "2025-08-14T11:54:03Z")
Hi
we have installed kibana - 8.18.4 and nodejs version 20.19.2in ubuntu - 22.04 but still it vulnerable with Risk fector high below is the CVE
CVE: [CVE-2025-27209](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-27209), [CVE-2025-27210](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-27210)
Can you please let us know when node version upgrade in which version?
Thanks for advanced
---
### Author:  [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)
#### Post date: [August 14, 2025, 5:03pm UTC](https://discuss.elastic.co/t/node-js-vul-detedted-in-kibana/381039/2 "2025-08-14T17:03:30Z")
Hi @Ekta,
Having a dig at the CVEs, it looks like [CVE-2025-27209](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-27209) is specific to Node.js v24.x and [CVE-2025-27210](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-27210) relates to Node.js versions 20.x, 22.x, and 24.x:
> **[Node.js Vulnerabilities CVE-2025-27210 & CVE-2025-27209 Fix](https://aardwolfsecurity.com/critical-node-js-vulnerabilities-expose-windows-applications-to-path-traversal-and-hashdos-attacks/#penci-Examining_CVE-2025-27209_HashDoS_Attack_Through_V8_Engine)**
>
> Critical Node.js vulnerabilities CVE-2025-27210 Windows path traversal and CVE-2025-27209 HashDoS attack fixed. Secure your applications.
The latest Kibana v8.x and v9.x look to be on [22.17.1](https://github.com/elastic/kibana/blob/v8.19.2/package.json#L76C14-L76C14) so I would recommend upgrading to the latest (v8.19.2 or v9.1.2). If you have any further questions feel free to reach out to [security@elastic.co](mailto:security@elastic.co).
---
### Author:  [@Ekta](https://discuss.elastic.co/u/Ekta)
#### Post date: [August 18, 2025, 9:01am UTC](https://discuss.elastic.co/t/node-js-vul-detedted-in-kibana/381039/3 "2025-08-18T09:01:46Z")
> [@carly.richmond](#):
>
> e [CVE-2025-27209](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-27209)
@carly.richmond can you please let us know when nodejs new version in release in 8.18.x series and also please let us know when kibana 8.19.1 is supported with 8.18.1 elasticsearch?
---
### Author:  [@Ekta](https://discuss.elastic.co/u/Ekta)
#### Post date: [August 18, 2025, 9:21am UTC](https://discuss.elastic.co/t/node-js-vul-detedted-in-kibana/381039/4 "2025-08-18T09:21:32Z")
@carly.richmond currently nodejs version is 20.19.2 so can you please let us know when 20.19.4 version upgrade in which kibana version?