Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g779-8rvr-37xx

Опубликовано: 26 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.6

Описание

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings.

This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26.

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings.

This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26.

EPSS

Процентиль: 25%
0.00324
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 1 месяца назад

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

CVSS3: 5.6
redhat
около 1 месяца назад

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

CVSS3: 9.8
nvd
около 1 месяца назад

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

CVSS3: 9.8
debian
около 1 месяца назад

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnam ...

rocky
10 дней назад

Important: nodejs:22 security, bug fix, and enhancement update

EPSS

Процентиль: 25%
0.00324
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-284