AX·NEWS
Sign in

Vulnerability

CVE-2026-106074 — nodejs node vulnerability

medium 4.8 1 story · 1 outlet

Official record (cve.org)NVDCVE watch

Impacted if

  • nodejs node ≤ 22.23.3 · ≤ 24.22.0 · ≤ 26.12.0

over the network · no login

A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-sn

First seen by AX-NEWS · latest story . Severity: NVD, or the CVE record while the NVD has not scored it. This product uses data from the NVD API but is not endorsed or certified by the NVD.

Coverage

  1. Please update immediately: Node.js release high-risk security updates at the highest level
    CNIT Home (EN Mirror) Hardware Translated from zh-cn