CVE-2026-58041

Stories

1. node 2026-07-29, Version 24.18.1 'Krypton' (LTS), @juanarbol

   This is a security release. Notable Changes (CVE-2026-56846) http2: retain header memory in session accounting (Matteo Collina) – High (CVE-2026-56848) http2: defer rst stream while in scope (Matteo Collina) – High (CVE-2026-58043) permission: avoid granting radix split nodes…

   Node.js BlogJul 29

2. node 2026-07-29, Version 26.5.1 (Current), @RafaelGSS

   Node.js 26.5.1 is a security release with high- and medium-severity fixes, including issues in HTTP/2, permissions, HTTPS, and SQLite. The listed vulnerabilities include CVE-2026-56848 and CVE-2026-58043, both rated High.

   Node.js BlogJul 29

Publishers

• Node.js Blog

Often mentioned with

• CVE-2026-56847
• CVE-2026-56848
• CVE-2026-56850
• CVE-2026-58039
• CVE-2026-58040
• CVE-2026-58042
• CVE-2026-58043
• CVE-2026-58044
• CVE-2026-58045
• CVE-2026-56846