A security update has been released to address vulnerabilities found in Node.Js products.
The vulnerabilities addressed include an improper handling of NUL characters in the Node.Js DNS resolution feature (CVE-2026-105482) and a certificate validation bypass vulnerability in the Node.Js TLS hostname verification feature (CVE-2026-105483, CVE-2026-106069) in the Node.Js TLS hostname validation feature.
Affected Versions for CVE-2026-105482 and CVE-2026-106069 are Node.Js 22.23.3 And earlier, 24.22.0 And earlier, 26.12.0 Or earlier; for CVE-2026-105483, Node.Js 24.22.0 Or earlier and 26.12.0 Or earlier.
The latest patched version is Node.Js 22.23.4, 24.22.1, 26.12.1; For CVE-2026-105483, they are Node.Js 24.22.1 And 26.12.1.
Users of these products should update to the latest version of the Vulnerability Patch following the instructions on the reference website.
