Review Node.js Vulnerability Findings for DocuShare 7.6, 7.7, 8.0, and 8.1 – Xerox DocuShare Support

Audience DocuShare 7.6, 7.7, 8.0, and 8.1 administrators and security teams

Review Node.js Vulnerability Findings for DocuShare 7.6, 7.7, 8.0, and 8.1

Important The reviewed DocuShare 7.6 and 7.7 base-product files, and the DocuShare 8.0 and 8.1 base product, did not include Node.js. However, the optional Document Viewer uses Accusoft PrizmDoc, installed separately from DocuShare. A reviewed Linux PrizmDoc 12.1 package contains Node.js 4.2.6, an end-of-life release covered by the Node.js advisory published October 21, 2026. Assess this PrizmDoc runtime using Accusoft guidance.

Overview

The advisory concerns Node.js and its dependencies. The DocuShare 7.6, 7.7, 8.0, and 8.1 base products in scope do not include Node.js. A runtime finding in PrizmDoc is a PrizmDoc finding, not evidence that the DocuShare base product contains Node.js.

Engineering Findings

The reviewed DocuShare 7.6 and 7.7 base product files did not include Node.js.
The reviewed DocuShare 8.0 and 8.1 base product did not include Node.js.
The optional Document Viewer uses separately installed Accusoft PrizmDoc.
The reviewed Linux PrizmDoc 12.1 package contains Node.js 4.2.6; this observation applies only to that reviewed package.
Node.js 4.2.6 is end-of-life, and the advisory treats end-of-life versions as affected.
The Windows PrizmDoc installer/package was not verified in this assessment.
JavaScript source files or dependency metadata alone do not prove that a Node.js runtime is installed or running.

Recommended Action

If Document Viewer/PrizmDoc is installed, identify the operating system and PrizmDoc version and follow Accusoft security guidance and support for the PrizmDoc Node.js runtime and supported remediation. Do not manually delete or replace its runtime without vendor guidance. Assess separately installed Node.js under the vendor responsible for that application.

If a Security Scan Reports Node.js

(1) Review the scanner output for the path, version, advisory or CVE identifiers, and detection method.

(2) If the path is inside the PrizmDoc installation folder, treat that runtime as belonging to PrizmDoc and assess it using Accusoft guidance.

(3) If it is separately installed for another application, contact that application's vendor.

(4) If you need help validating the DocuShare/PrizmDoc integration or component ownership, contact Xerox DocuShare Support with the DocuShare version, operating system, PrizmDoc version, full path and version, and scan evidence.

Assessment Scope

This assessment covers DocuShare 7.6, 7.7, 8.0, and 8.1 and the October 21, 2026 advisory. The Linux PrizmDoc 12.1 finding applies to the package reviewed; the Windows PrizmDoc package was not verified. The assessment does not cover separately installed software, customer-developed integrations, or unrelated vulnerabilities.