The Hacker News

Node.js Fixes 16 Flaws, Including HTTP/2 Bugs That Crash Servers and Leak Other Connections' Data

Node.js fixed 16 vulnerabilities across three supported lines, including HTTP/2 server crashes and HTTPS memory disclosure.
cyberpress

Node.js Fixes 16 Security Flaws Allowing Hackers to Crash Servers and Leak Sensitive Data

The Node.js Project shipped coordinated security releases on November 11, 2026. They cover the 22.x, 24.x and 26.x lines in v22.23.5, v24.22.3 and v26.13.1.