PT-2026-120749 · Undefined · Undefined
CVE-2026-105481
·
Published
2026-10-21
·
Updated
2026-10-21
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
🚨 HIGH - Multiple Vulnerabilities Patched in Node.js October 2026 Security Releases
Node.js has released security updates addressing multiple high-severity flaws across supported release lines, including an out-of-bounds write in the Brotli decoder enabling Remote Code Execution (CVE-2026-111497), host IP/TLS certificate validation bypasses (CVE-2026-105483, CVE-2026-106069, CVE-2026-105482), and PRNG entropy reuse in startup snapshots (CVE-2026-106074).
🔍 CVEs: CVE-2026-111497, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-105481, CVE-2026-106072, CVE-2026-106074
👉 Affected: Node.js 26.x, 24.x, and 22.x lines | Upgrade to v26.12.1, v24.22.1, or v22.23.4 or later immediately
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined