[Git][security-tracker-team/security-tracker][master] CVE-2026-105483

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
16679f75 by Bastien Roucariès at 2026-10-25T23:58:05+01:00
CVE-2026-105483

Add a note about this regression not present in older release

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4038,7 +4038,10 @@ CVE-2026-105482 (A flaw in Node.js DNS resolution allows hostnames containing a
 	NOTE: Fixed by: https://github.com/nodejs/node/commit/19c505600222626bb1457a723418b2b8f9d6c400 (v22.23.4)
 CVE-2026-105483 (A flaw in Node.js TLS hostname verification allows a certificate witho ...)
 	- nodejs <unfixed> (bug #1151688; bug #1151859)
+	[trixie] - nodejs <not-affected> (vulnerable code introduced later)
+	[bookworm] - nodejs <not-affected> (vulnerable code introduced later)
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#tls-certificate-hostname-bypass-when-the-ip-is-written-fullwidth-digits-cve-2026-105483---high
+	NOTE: Regression of  CVE-2026-48618 on node24 and node26 not present before
 CVE-2026-106069 (A flaw in Node.js TLS hostname verification can cause a server certifi ...)
 	- nodejs <unfixed> (bug #1151688; bug #1151859)
 	NOTE: https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#tls-certificate-hostname-bypass-when-the-host-loosely-resolves-to-an-ip-address-cve-2026-106069---high



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16679f75f906cbea007aab0ff06c215eb36c3c24

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/16679f75f906cbea007aab0ff06c215eb36c3c24
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261025/90f8eb74/attachment.htm>