| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-105483 | Node.js TLS Hostname Verification vulnerability | Node | High | 03-11-2026 |
Technical Information
An unauthenticated attacker can exploit a TLS certificate hostname verification bypass vulnerability in Node.js by specifying an IPv4 address using non-ASCII characters, such as fullwidth digits, potentially causing a certificate without a matching IP address Subject Alternative Name (SAN) to be incorrectly accepted.
Patch release date: Oct 21, 2026
Further information on this vulnerability is available at : CVE-2026-105483
Affected Software
Versions < 24.22.1Versions < 26.12.1