CVE-2026-123873: Low severity Node.js Node.js vulnerability
Published Nov 11, 2026
·Updated
Affected Software
3 affected componentsFixes available
Node.js Node.js>=22.0.0<22.23.5
22.23.5
Node.js Node.js>=26.0.0<26.13.1
26.13.1
Node.js Node.js>=24.0.0<24.22.3
24.22.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 22.23.5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 26.13.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 24.22.3
Event History
Nov 11, 2026
CVE Published
via Node.js·04:44 PM
Data Sourced
via Node.js·04:44 PM
SeverityAffected Software
Parent advisories
This vulnerability appears in the following advisories.