Node.js Patches 12 Vulnerabilities, Two High Severity Flaws Identified

On June 18, 2026, Node.js released security updates addressing 12 vulnerabilities across its supported versions 22.x, 24.x, and 26.x. Among these, two high-severity vulnerabilities could lead to denial-of-service (DoS) conditions and authentication bypass. The patched versions are v22.23.0, v24.17.0, and v26.3.1. Users of affected Node.js versions are advised to update immediately to mitigate potential exploitation risks. The vulnerabilities could allow attackers to disrupt service or bypass authentication mechanisms, posing significant risks to applications relying on Node.js. The updates are critical for maintaining the security integrity of systems using these versions.

Key Points: • Node.js has patched 12 vulnerabilities, including two rated high severity. • The high-severity flaws could lead to denial-of-service and authentication bypass. • Affected versions include Node.js 22.x, 24.x, and 26.x, with updates available.