Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-111497

1 brief RSS
high advisory

Node.js: DNS Resolver NUL Byte Truncation (CVE-2026-105482)

Node.js is vulnerable to NUL byte truncation in dns.resolve* functions, allowing attackers to bypass allowlist filters and perform SSRF by injecting a NUL character into hostname strings.

Node.js +3 ssrf nodejs dns vulnerability web-security supply-chain cve-2026-111497 denial-of-service +1
1r 3t 2c updated