Section

Advisories

Vendor PSIRT bulletins, CERT notes, CISA and partner-agency alerts, and distribution security notices.

10 matching records.

1. 66
   Advisory Fortinet PSIRT 6d ago

   Node2Shell CVEs

   CVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js…

   CVSS 9.8 EPSS 0.83 CVE-2026-105482CVE-2026-105483CVE-2026-106069+7 more Fortinet Node.js Developer platform
2. 53
   Cisco advisory Cisco PSIRT 4d ago

   Vulnerabilities in Node.js Affecting Cisco Products: October 2026

   On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli…

   EPSS 0.83 Fix available CVE-2026-111497CVE-2026-105482CVE-2026-105483+1 more Cisco Node.js Developer platform
3. 42
   Outbreak alert FortiGuard 5d ago

   Node2Shell Remote Code Execution

   CVE-2026-111497 is an out-of-bounds write vulnerability in Google's Brotli decoder, a component used to decompress data encoded with the Brotli compression algorithm. Brotli is widely used in web communications and is…

   EPSS 0.83 CVE-2026-111497 Google Node.js Developer platform
4. 32
   ICS advisory CISA 9d ago

   Siemens Industrial Edge App Publisher

   The Industrial Edge App Publisher contains a vulnerability chain involving improper certificate validation and the rendering of unescaped data from backend responses. These issues can be combined to allow an attacker on the…

   CVSS 3.1 Fix available CVE-2026-78556CVE-2026-78557 Node.js Siemens Developer platform
5. 25
   Red Hat advisory Red Hat 2d ago

   Important: nodejs:24 security, bug fix, and enhancement update

   An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

   Red Hat Node.js Operating system
6. 25
   Red Hat advisory Red Hat 2d ago

   Important: nodejs:24 security, bug fix, and enhancement update

   An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score…

   Red Hat Node.js Operating system
7. 25
   AWS bulletin AWS 9d ago

   CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server

   Bulletin ID: 2026-146-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 13:00 PM PDT Description: Strands Agents is an open-source SDK, available for Python and TypeScript, for building AI…

   CVE-2026-115419 Amazon Web Services Node.js Developer platform
8. 25
   Advisory MSRC 16d ago

   CVE-2026-109461 Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

   Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network.

   CVE-2026-109461 Microsoft Node.js Developer platform
9. 25
   AWS bulletin AWS 23d ago

   CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib

   Bulletin ID: 2026-131-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/08/2026 12:30 PM PDT Description: AWS CDK is an open source framework that allows customers to build cloud infrastructure…

   CVE-2026-107608 Amazon Web Services Node.js Cloud platform
10. 8
    Node.js security release Node.js 10d ago

    Wednesday, October 21, 2026 Security Releases

    Node.js

Same filters as JSON: /api/items?category=advisory&window=30d&vendor=Node.js&limit=100. RSS for this section: feed.xml.