NO
Product
node
by nodejs · last CVE Oct 23, 2026
55
CVEs
0
On KEV
9.8
Max CVSS
9
New 30D
Severity mix
Critical 1High 21Medium 20Low 13
Watch

Add node to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48930
9.8
0%
Jun 26
A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings
Affected: 22.22.3 through 22.22.3; 24.16.0 through 24.16.0; 26.3.0 through 26.3.0
Showing 1