Tag: Runtime

Posts tagged “Runtime”

Oct 22, 2026 · adswds team · Security
dns.resolve truncates names at NUL: Node.js CVE-2026-105482
Node.js, 21 Oct 2026: CVE-2026-105482 (high) truncates names passed to dns.resolve when they contain a NUL. It affects 26.x, 24.x, and 22.x. The fix validates null bytes in 26.12.1, 24.22.1, and 22.23.4.
Oct 21, 2026 · adswds team · Security
Node.js Brotli decoder out-of-bounds write: CVE-2026-111497
Node.js, 21 Oct 2026: CVE-2026-111497 is high. A Brotli decoder out-of-bounds write can permit remote code execution. It affects 26.x, 24.x, and 22.x, fixed in 26.12.1, 24.22.1, and 22.23.4.