Node.js github.com

2026-10-21, Version 26.12.1 (Current), @aduh95 prepared by @RafaelGSS

Imported from official source

October 21, 2026 10:38

Cybersecurity Classified by Officially

(CVE-2026-106069, CVE-2026-106072) tls: reject non-canonical IP addresses (Matteo Collina) – High (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) – High (CVE-2026-105483) tls: fix ip normalization regression (James M Snell) – High (CVE-2026-111497) src: expose BROTLI_DECODER_ERROR_FORMAT_BLOCK_SWITCH (Antoine du Hamel) – High (CVE-2026-111497) deps: brotli: cherry-p …

This is an extract. The publication continues at the source.

Read the original at the source: https://github.com/nodejs/node/releases/tag/v26.12.1

Officially imported this from Node.js’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Node.js — imported from official source
Official source: https://github.com/nodejs/node/releases.atom ATOM
Imported: October 21, 2026 11:00
Versions: 1 recorded
Identity: tag:github.com,2008:Repository/27193779/v26.12.1