CVE-2026-48937

Stories

1. node 2026-06-18, Version 24.17.0 'Krypton' (LTS), @aduh95

   This is a security release. Notable Changes (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High (CVE-2026-48615) lib,test: redact proxy credentials in…

   Node.js BlogJun 18

2. node 2026-06-18, Version 22.23.0 'Jod' (LTS), @aduh95

   This is a security release. Notable Changes (CVE-2026-48618) tls: normalize hostname for server identity checks (Matteo Collina) – High (CVE-2026-48933) crypto: guard WebCrypto cipher output length (Filip Skokan) – High (CVE-2026-48937) deps: fix integration issues with the…

   Node.js BlogJun 18

Publishers

• Node.js Blog

Often mentioned with

• CVE-2026-48615
• CVE-2026-48617
• CVE-2026-48618
• CVE-2026-48619
• CVE-2026-48928
• CVE-2026-48930
• CVE-2026-48931
• CVE-2026-48933
• CVE-2026-48934
• CVE-2026-48935