Priority LOW 35
A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse().
RHSA-2026:87702
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-10-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images nodejs22-1:22.23.4-2.3.2.3.hum1@aarch64, nodejs22-1:22.23.4-2.3.2.3.hum1@s390x, nodejs22-1:22.23.4-2.3.2.3.hum1@src +22
Fixes 2 records
Priority LOW 34
A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth dig…