VIRY.CZRADARmenuhledat a filtrovat1, zapnutých podmínek: 1
CVE-2026-106070: Node.js October 21, 2026 Security Releases
2 karet z 2 položek · v celém archivu ·
celý přehledCZ ·
EN/orig
CVE-2026-106070
Pro tohle CVE zatím žádné hodnocení CVSS nemám. Buď ho záznam CVE Programu
neuvádí, nebo ještě nebyl vydaný — advisories často citují rezervované ID
dřív, než záznam vznikne.
Executive Summary On October 21, 2026, Node.js released fixes for 10 vulnerabilities across its three supported release lines: 22.x, 24.x, and 26.x. Four are rated High. The most severe, CVE-2026-111497, is an out-of-bounds write in the bundled Brotli decoder that Node.js says permits remote code execution. These flaws live in the Node.js runtime itself, not in application packages, so dependency checks will not surface them. Qualys customers can find affected runtimes across hosts, containers,…
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: CVE-2026-105483, CVE-2026-106069, CVE-2026-111497, CVE-2026-105481, CVE-2026-106072, CVE-2026-106074, CVE-2026-106070, CVE-2026-106071, CVE-2026-106073, Summary: This security release includes the following dependency updates to address public vulnerabilities: c-ares on 26.x, 24.x, 22.x ca-cert (eMudhra Intermediate CA Compromise) on 26.x, 24.x, 22.x OpenSSL on 24.x, 22.x SQLite on 22.x Undici…