Skip to content
Threat Feed
Subscribe

Product

Brotli (1.0.3 <= Version <= 1.2.0)

1 brief RSS
high advisory

Node.js: DNS Resolver NUL Byte Truncation (CVE-2026-105482)

Node.js is vulnerable to NUL byte truncation in dns.resolve* functions, allowing attackers to bypass allowlist filters and perform SSRF by injecting a NUL character into hostname strings.

Node.js +4 ssrf nodejs dns vulnerability web-security supply-chain cve-2026-111497 denial-of-service +1
1r 3t 2c updated