#nodejs

Node.js has released urgent security updates for versions 22.x, 24.x and 26.x, fixing 10 vulnerabilities—including four rated high—and blocking compromised eMudhra certificates. Users on end-of-life releases are urged to upgrade. 🔒⚠️ #Nodejs #Cybersecurity https://www.heise.de/en/news/Node-js-fixes-its-own-and-inherited-security-vulnerabilities-11496143.html

The Node.js security release fixes 10 flaws, including a Brotli remote code execution bug, CVE-2026-111497. Update to 26.12.1, 24.22.1 or 22.23.4.

#NodeJS #CVE2026111497 #CVE2026105483 #CVE2026106069 #RemoteCodeExecution #TLS #JavaScript #CyberSecurity

https://securityonline.info/nodejs-security-release-october-2026/?utm_source=mastodon&utm_medium=jetpack_social

Node.js security releases are available - there are a few high severity issues fixed as well as an update to fix the well publicised intermediate CA compromise: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases
#NodeJS #security