Nodejs

5 posts tagged with “Nodejs”

CVE-2026-87776: Express compression leaks native memory until the process dies
cvecompressionexpress

CVE-2026-87776: Express compression leaks native memory until the process dies

How to fix CVE-2026-87776: upgrade compression to 1.8.2

Sep 11, 2026
Read
CVE-2026-75021: fastify-cli debug-host bind can expose Inspector RCE
cvefastify-clinodejs

CVE-2026-75021: fastify-cli debug-host bind can expose Inspector RCE

How to fix CVE-2026-75021: upgrade fastify-cli to 8.0.1

Sep 8, 2026
Read
CVE-2026-85024: undici WebSocket deflate bug can crash the Node process
cveundicinodejs

CVE-2026-85024: undici WebSocket deflate bug can crash the Node process

How to fix CVE-2026-85024: upgrade undici to 8.10.2 (or 7.29.1 / 6.28.1 on older trains)

Sep 4, 2026
Read
BREAKING: CVE-2026-76169 lets malformed URLs skip Fastify not-found auth
cvefastifyauth-bypass

BREAKING: CVE-2026-76169 lets malformed URLs skip Fastify not-found auth

How to fix CVE-2026-76169: upgrade fastify to 5.12.2

Sep 4, 2026
Read
BREAKING: CVE-2026-85184 lets absolute-form requests skip Fastify middie auth
cvefastifymiddie

BREAKING: CVE-2026-85184 lets absolute-form requests skip Fastify middie auth

How to fix CVE-2026-85184: upgrade @fastify/middie to 9.3.4

Sep 4, 2026
Read