CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. See the original NVD description below for full technical details.
CVE
CVE-2026-48934
Severity
MEDIUM
CVSS
4.3
EPSS
0.26%
Original NVD Description
A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
Related CVEs
Other vulnerabilities affecting the same vendor(s)