Node.js

Everything NetSec Tribune has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

CVE-2026-112366: Picomatch ReDoS Vulnerability Freezes Node.js Apps via Glob Patterns

A high-severity regular expression denial of service vulnerability in picomatch allows attackers to freeze Node.js applications using specific glob patterns.

Oct 19, 2026

Vulnerabilities

@enmaso/node-convert 1.0.0 users face CVE-2026-107703 critical RCE from unsanitized inputs

The @enmaso/node-convert library contains a critical flaw allowing arbitrary command execution via unsanitized inputs in versions through 1.0.0.

Oct 10, 2026