CVE-2026-123871

A flaw was found in Node.js. This vulnerability allows information disclosure when invalid proxy configurations trigger error handling routines that fail to redact authentication details. Under these conditions, the application outputs raw proxy URLs containing embedded usernames and passwords to...