Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Multiple versions of Node.js (20, 22, and 24) have been identified with a critical denial of service (DoS) vulnerability affecting users on Fedora 42. The vulnerability can lead to resource exhaustion, necessitating updates to versions 20.20.0, 22.22.0, and 24.13.0 to mitigate the issue.
openSUSE Leap 15.6 has released a security advisory addressing multiple vulnerabilities in Node.js 22. Key issues include a resource exhaustion vulnerability (CVE-2026-22036) and denial of service due to TLS error handling bypass (CVE-2026-21637), affecting users of the platform. Additional fixes al...
SUSE and openSUSE have released an important security update for Node.js 20, addressing several vulnerabilities. The update includes fixes for issues such as unsafe buffer creation and error handling in TLSSocket, affecting users of Node.js 20. Key CVEs include CVE-2026-22036 and CVE-2025-59465, amo...
