Security & Lifecycle News

Aggregated from vendor advisories, security research, and industry publications.

Show: Network-relevant Vendor advisories CVE Government Industry Blog All Vendor: Node.js (clear)

1. 2026-10-27 · Cisco Security Advisories

   Vulnerabilities in Node.js and Brotli Affecting Cisco Products: October 2026

   On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x.  These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate vali…

   Vendors: Cisco, Node.js, Splunk · CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-111497

2. 2026-10-26 · FortiGuard PSIRT Advisories

   Node2Shell CVEs

   CVSSv3 Score: 9.8 CVE-2026-105482 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-105483 - (high)This vulnerability affects Node.js 26.x and 24.x.CVE-2026-106069 - (high)This vulnerability affects Node.js 26.x, 24.x, and 22.x.CVE-2026-111497 - (high…

   Vendors: Node.js · CVE-2026-105481, CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-106070