2026-10-21, Version 22.23.4 'Jod' (LTS), @aduh95
Cybersecurity Classified by Officially
(CVE-2026-105481) http: ensure agent data guard works without I/O (James M Snell) (CVE-2026-105482) dns: validate resolve inputs for null bytes (James M Snell) (CVE-2026-106069) tls: reject non-canonical IP addresses (Matteo Collina) (CVE-2026-106073) permission: check permission model in realpathSync (RafaelGSS) (CVE-2026-106074) crypto: reset random caches across snapshots (Filip Skokan) (CVE- …
This is an extract. The publication continues at the source.
Read the original at the source: https://github.com/nodejs/node/releases/tag/v22.23.4
Officially imported this from Node.js’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
Provenance
- Organization
- Node.js — imported from official source
- Official source
- https://github.com/nodejs/node/releases.atom ATOM
- Imported
- October 21, 2026 11:00
- Versions
- 1 recorded
- Identity
-
tag:github.com,2008:Repository/27193779/v22.23.4