Patching CVE-2026-105483 across a mixed Node.js estate

Chronological Source Flow
Back

AI Fusion Summary

CVE-2026-105483 is a High-rated vulnerability affecting Node.js versions 24.x before 24.22.1 and 26.x before 26.12.1. The flaw allows a fullwidth-digit IPv4 host to be treated as a DNS name during TLS verification, enabling a trusted certificate with a matching DNS SAN to authenticate an IP endpoint lacking an IP SAN. With a CVSS v3.0 score of 7.4 and CWE-295, the official patch was released October 21, 2026, requiring comprehensive deployment across mixed estates.
Community Comments
Loading updates...
0