https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:01:46.397955+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-58045 BELL-CVE-2026-58045 2026-10-03T12:01:46.535409+00:00

Affected: Alpaquita:25: nodejs, Alpaquita:stream: nodejs, BellSoft Hardened Containers:25: nodejs, BellSoft Hardened Containers:stream: nodejs

 https://cve.radiocsirt.org/vuln/bit-node-2026-58045 BIT-node-2026-58045 2026-10-03T12:01:46.535476+00:00

Affected: Bitnami: node

A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected. Repeated exploitation of this condition can result in a denial of service. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0947 certfr-2026-avi-0947 — De multiples vulnérabilités ont été découvertes dans Node.js. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-03T12:01:46.535503+00:00 certfr-2026-avi-0947 https://cve.radiocsirt.org/vuln/cleanstart-2026-fk24161 CLEANSTART-2026-FK24161 — Security fix for CVE-2026-58045 applied in: nodejs 26.5.0-r0 2026-10-03T12:01:46.535522+00:00

Affected: CleanStart: nodejs

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-344107 EUVD-2026-344107 2026-10-03T12:01:46.535541+00:00 EUVD-2026-344107 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58045 fkie_cve-2026-58045 2026-10-03T12:01:46.535553+00:00

A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected. Repeated exploitation of this condition can result in a denial of service. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

 https://cve.radiocsirt.org/vuln/ghsa-4j79-vxj3-vjvm GHSA-4j79-vxj3-vjvm 2026-10-03T12:01:46.535574+00:00

A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected.

Repeated exploitation of this condition can result in a denial of service.

This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11439-1 openSUSE-SU-2026:11439-1 — corepack24-24.18.1-1.1 on GA media 2026-10-03T12:01:46.535591+00:00

corepack24-24.18.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:48305 RHSA-2026:48305 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update 2026-10-03T12:01:46.535612+00:00

nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks nodejs: Node.js: Permission Model flaw allows trace logs to bypass filesystem write restrictions nodejs: Node.js: mTLS client identities can be reused due to HTTPS Agent connection flaw nodejs: Information disclosure due to improper permission enforcement nodejs: HTTPS Agent TLS session reuse skips hostname verification nodejs: Node.js node:sqlite: Unintended data modification due to stale statement iterator nodejs: Node.js: Denial of Service via DNS responses with excessive A records nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw nodejs: Node.js: Request smuggling via HTTP client header truncation nodejs: Node.js: Denial of Service vulnerability

 https://cve.radiocsirt.org/vuln/suse-su-2026:23130-1 SUSE-SU-2026:23130-1 — Security update for nodejs22 2026-10-03T12:01:46.535646+00:00

Security update for nodejs22

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-58045 UBUNTU-CVE-2026-58045 2026-10-03T12:01:46.535666+00:00

Affected: Ubuntu:Pro:14.04:LTS: nodejs, Ubuntu:Pro:16.04:LTS: nodejs, Ubuntu:Pro:18.04:LTS: nodejs, Ubuntu:Pro:20.04:LTS: nodejs, Ubuntu:Pro:22.04:LTS: nodejs, Ubuntu:24.04:LTS: nodejs, Ubuntu:26.04:LTS: nodejs

A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected. Repeated exploitation of this condition can result in a denial of service. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2585 WID-SEC-W-2026-2585 — Node.js: Mehrere Schwachstellen 2026-10-03T12:01:46.535720+00:00

Ein Angreifer kann mehrere Schwachstellen in Node.js ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um Dateien zu manipulieren.