Multiple Vulnerabilities in SUSE Curl and Node.js Affect Security and Performance

SUSE has released updates addressing several vulnerabilities in Curl and Node.js, impacting various systems. The Curl update includes multiple CVEs, such as CVE-2026-6253, which allows proxy credential leaks, and CVE-2026-6429, exposing netrc credentials. Node.js vulnerabilities include CVE-2026-48619, which prevents unbounded memory growth, and CVE-2026-48615, which redacts proxy credentials in error messages. These vulnerabilities could lead to credential leaks and denial of service (DoS) attacks. Users of SUSE Linux Enterprise Server and Node.js are advised to apply the patches immediately. The updates were released on June 30, 2026, with varying severity ratings.

Key Points: • SUSE Curl and Node.js updates released on June 30, 2026, addressing multiple vulnerabilities. • Critical CVEs include Curl's CVE-2026-6253 and Node.js's CVE-2026-48619, which could lead to credential leaks. • Users are urged to apply patches immediately to mitigate potential security risks.