AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
Generated stack · OpenJS Foundation

Node.js

JavaScript runtime under most vibe-coded backends, API routes and serverless functions.

1Advisories
0critical
1high
0medium
2026-10-21Latest
Timeline · advisories per quarter
12026 Q4
Named in sources

Reported for Node.js

01. highCode executionNew this weekNode.js October 21, 2026 security releases: four HIGH bugs in 26.x, 24.x and 22.xNode.js shipped 22.23.4, 24.22.1 and 26.12.1 on October 21, 2026, fixing 10 CVEs. The four HIGH ones are a Brotli decoder out-of-bounds write that can lead to remote code execution, two TLS certificate hostname bypasses, and dns.resolve truncating names that contain a NUL byte. Any app running its own Node process should upgrade. Node.js Next.js Replit 2026-10-21
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.