PT-2026-120749 · Undefined · Undefined
CVE-2026-105481
·
Publicado
2026-10-21
·
Atualizado
2026-10-21
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
🚨 HIGH - Multiple Vulnerabilities Patched in Node.js October 2026 Security Releases
Node.js has released security updates addressing multiple high-severity flaws across supported release lines, including an out-of-bounds write in the Brotli decoder enabling Remote Code Execution (CVE-2026-111497), host IP/TLS certificate validation bypasses (CVE-2026-105483, CVE-2026-106069, CVE-2026-105482), and PRNG entropy reuse in startup snapshots (CVE-2026-106074).
🔍 CVEs: CVE-2026-111497, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-105481, CVE-2026-106072, CVE-2026-106074
👉 Affected: Node.js 26.x, 24.x, and 22.x lines | Upgrade to v26.12.1, v24.22.1, or v22.23.4 or later immediately
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Undefined