CVE-2026-48615

CVE-2026-48615 : A flaw in Node.js proxy tunnel error handling can expose embedded proxy credentials in ERR_PROXY_TUNNEL messages. The issue affects all supported release lines (Node.js 22, 24, and 26) and can lead to credentials being captured via error paths, logs, or diagnostics. The SUSE secu...