Node.js Patches 16 Security Vulnerabilities Allowing Remote Server Crashes, Memory Leaks, and Authentication Bypass

The Node.js Project released security updates on November 11, 2026, for the 26.x, 24.x, and 22.x lines. They fix 16 vulnerabilities: 7 high, 6 medium, and 3 low severity. Many can be triggered remotely by unauthenticated clients, and the flaws cluster in HTTP/2 and TLS handling. The patched builds are v22.23.5, v24.22.3, and v26.13.1, and […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform