Package · Wolfi

nodejs-26

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.7

CVE-2026-106072 Public exploit

A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint whe…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
Medium 4.8

CVE-2026-106074 Public exploit

A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, a…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026
Medium 6.5

CVE-2026-105481 Public exploit

A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Oct 23, 2026