Node.js 22.x < 22.23.0 / 24.x < 24.17.0 / 26.x < 26.3.1 Multiple Vulnerabilities (Thursday, June 18, 2026 Security Releases).

Language:

Version 1.5 Jul 2, 2026, 3:38 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202607021538
Version 1.4 Jun 29, 2026, 10:30 AM CVSS metrics ("CVSSv2 score" set to 10.0) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") CVSSv2 score source (changed from "CVE-2026-48618" to "CVE-2026-48930") Plugin Feed: 202606291030
Version 1.3 Jun 26, 2026, 4:08 PM CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin metadata (Add IAVM Info) Plugin Feed: 202606261608
Version 1.1 Jun 25, 2026, 3:43 PM New Plugin Feed: 202606251543

* Changelogs are generally available for changes made after Nov 1, 2022