Detections
Analytics
CVE-2026-48933
high
Description
A flaw in Node.js WebCrypto implementation can crash the process if the input of subtle.encrypt() is a multiple of 2GiB. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26. Thank you, to erichen for reporting this vulnerability and thank you Filip Skokan for fixing it.