CVE ID: CVE-2026-48930
Published: June 26, 2026
Description: A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
Severity: 0.0 | NA
More Information:
https://cvefeed.io/vuln/detail/CVE-2026-48930
CVE-2026-48930 - Node.js TLS Hostname Handling Vulnerability
-
Starburst-David
- Posts: 286
- Joined: Wed Feb 11, 2026 8:31 pm