TI-2026-36192 CVE-2026-48933 · GHSA-pvpp-9x2p-fxg3
Integer overflow in NodeJS node
Priority MEDIUM 45
A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB.
RHSA-2026:29012
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-06-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images nodejs24-1:24.18.0-0.1.hum1@aarch64, nodejs24-1:24.18.0-0.1.hum1@src, nodejs24-1:24.18.0-0.1.hum1@x86_64 +14
Fixes 3 records
TI-2026-35964 CVE-2026-48618 · GHSA-g57m-hr98-5m89
A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling…
Priority LOW 35
A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat.
TI-2026-35961 CVE-2026-48615 · GHSA-qqjm-7pv6-7q82
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in…
Priority LOW 33
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages.