Node.js — программная платформа, основанная на движке V8 (компилирующем JavaScript в машинный код)
Релизный цикл, информация об уязвимостях
График релизов
Релизные элементы
| KB | Версия | Билд | Дата доступности |
|---|---|---|---|
| 24.22.2 | 24.22.2 | ||
| 24.22.1 | 24.22.1 | ||
| 24.22.0 | 24.22.0 | ||
| 24.21.0 | 24.21.0 | ||
| 24.20.0 | 24.20.0 | ||
| 24.19.0 | 24.19.0 | ||
| 24.18.1 | 24.18.1 | ||
| 24.18.0 | 24.18.0 | ||
| 24.17.0 | 24.17.0 | ||
| 24.16.0 | 24.16.0 |
Показывать по
Количество 1 296
ELSA-2026-500512
ELSA-2026-500512: brotli security update (IMPORTANT)
ELSA-2026-500517
ELSA-2026-500517: nodejs:22 security update (IMPORTANT)
ELSA-2026-500518
ELSA-2026-500518: nodejs:24 security update (IMPORTANT)
ELSA-2026-500520
ELSA-2026-500520: nodejs:24 security update (IMPORTANT)
ELSA-2026-500515
ELSA-2026-500515: nodejs24 security update (IMPORTANT)
ELSA-2026-500513
ELSA-2026-500513: brotli security update (IMPORTANT)
ELSA-2026-500516
ELSA-2026-500516: nodejs22 security update (IMPORTANT)
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) ...
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| ELSA-2026-500512 ELSA-2026-500512: brotli security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500517 ELSA-2026-500517: nodejs:22 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500518 ELSA-2026-500518: nodejs:24 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500520 ELSA-2026-500520: nodejs:24 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500515 ELSA-2026-500515: nodejs24 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500513 ELSA-2026-500513: brotli security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
| ELSA-2026-500516 ELSA-2026-500516: nodejs22 security update (IMPORTANT) | 83% Высокий | 14 дней назад | |
 | CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | CVSS3: 9.8 | 83% Высокий | 17 дней назад |
| CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) ... | CVSS3: 9.8 | 83% Высокий | 17 дней назад |
 | CVE-2026-111497 A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1. | CVSS3: 9.8 | 83% Высокий | 17 дней назад |
Уязвимостей на страницу