CVE-2026-48930 – Node.js TLS Hostname Handling Vulnerability

CVE ID :CVE-2026-48930

Published : June 26, 2026, 1:14 a.m. | 30 minutes ago

Description :A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings.

This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…