The Hacker News

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data

Node.js fixed 16 vulnerabilities across three supported lines, including HTTP/2 server crashes and HTTPS memory disclosure.
cyberpress

Node.js Fixes 16 Security Flaws Allowing Hackers to Crash Servers and Leak Sensitive Data

The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.

Have you updated Node.js yet? A gentle explanation of 16 fixes, including 7 HIGH severity issues, and a vulnerability (CVE-2026-123864) where HTTPS could expose others' memory

Do you have any servers or tools running on Node.js? A security update has been released for Node.js versions 22, 24, and 26, which includes 7 HIGH severity issues. The most serious one is that, ...
Cyber Security News

Node.js Fixes 16 Security Flaws That Could Expose TLS Private Keys and Crash Servers Remotely

Node.js patched 16 flaws in versions 22.x, 24.x and 26.x. Some can leak TLS private keys or crash servers. Here is what to ...