CVE-2026-48928

Stories

1. node 2026-06-18, Version 26.3.1 (Current), @aduh95

   Node.js BlogNode.js version 26.3.1 is a security release with fixes for high- and medium-severity vulnerabilities. High-severity changes address TLS server identity hostname normalization and WebCrypto cipher output length, while other fixes cover proxy credential redaction, HTTP/2 origin-set growth, and SNI matching.

   1 source2026-06-18 04:37 UTC

2. node 2026-06-18, Version 24.17.0 'Krypton' (LTS), @aduh95

   Node.js Blog This is a security release. Notable Changes (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High (CVE-2026-48615) lib,test: redact proxy credentials in…

   1 source2026-06-18 04:37 UTC

3. node 2026-06-18, Version 22.23.0 'Jod' (LTS), @aduh95

   Node.js Blog This is a security release. Notable Changes (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High (CVE-2026-48937) deps: fix integration issues with the…

   1 source2026-06-18 04:37 UTC

Publishers

• Node.js Blog

Often mentioned with

• CVE-2026-48615
• CVE-2026-48617
• CVE-2026-48618
• CVE-2026-48619
• CVE-2026-48930
• CVE-2026-48931
• CVE-2026-48933
• CVE-2026-48934
• CVE-2026-48935
• CVE-2026-48937
• CVE-2026-48936