CVE-2026-48615

A flaw in Node.js proxy tunnel error handling could expose proxy credentials in ERRPROXYTUNNEL error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability...

CVE-2026-48930

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48933

A flaw in Node.js WebCrypto implementation can crash the process if the input of subtle.encrypt is a multiple of 2GiB. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48933

A flaw in Node.js WebCrypto implementation can crash the process if the input of subtle.encrypt is a multiple of 2GiB. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48618

CVE-2026-48618 is a Node.js TLS hostname handling issue involving unicode dot separator handling that can bypass wildcard-depth authentication due to resolver/verifier hostname normalization mismatches. Connected updates confirm the vulnerability affects Node.js 22, 24, and 26 across releases. SU...

CVE-2026-48619

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

EUVD-2026-39607

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-48619

A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-6330

creationtimestamp| type| source ---|---|--- 2026-06-25 22:25:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp5hvwozge27...

BIT-NODE-2026-48617

A flaw in Node.js Permission Model enforcement allows Bypass via process.report.writeReport Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: Node.js 22,...

CVE-2026-56324

creationtimestamp| type| source ---|---|--- 2026-06-22 23:59:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow3rjgmsh2s...

CVE-2026-54268

creationtimestamp| type| source ---|---|--- 2026-06-22 23:54:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow3ikyahx2q 2026-07-20 08:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2vbuzolw2v...

CVE-2026-54271

creationtimestamp| type| source ---|---|--- 2026-06-22 23:45:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow2xvn5ft2q 2026-07-20 07:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mr2qawu73k26...

CVE-2026-50168

creationtimestamp| type| source ---|---|--- 2026-06-22 23:29:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mow24eiu5p2q...

CVE-2026-44272

creationtimestamp| type| source ---|---|--- 2026-06-22 23:23:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzqs6dzq2j...

CVE-2026-44271

creationtimestamp| type| source ---|---|--- 2026-06-22 23:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movzkayykd2f 2026-06-23 14:04:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3moxkylwnok27 2026-07-23 01:07:06+00:00| seen|...

CVE-2026-45177

creationtimestamp| type| source ---|---|--- 2026-06-22 23:01:47+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3movykbs7g52w 2026-07-09 01:23:02+00:00| seen| https://bsky.app/profile/smit-artem.bsky.social/post/3mq6hvkvtuv2z...

CVE-2026-48931

A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

CVE-2026-56104

creationtimestamp| type| source ---|---|--- 2026-06-22 19:46:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movnnpmgvh27...

CVE-2026-12249

creationtimestamp| type| source ---|---|--- 2026-06-22 19:32:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movmu4ylmw2q 2026-06-23 16:29:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116800366330235493...