The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages. When proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade nodejsUpgrade nodejs-packaging-bundlerUpgrade npmUpgrade nodejs-docsUpgrade nodejs-nodemonUpgrade v8-12.4-develUpgrade nodejs-full-i18nUpgrade nodejs-packagingUpgrade v8-13.6-develUpgrade nodejs-develUpgrade nodejs-libs | Jul 7, 2026 | Jul 6, 2026 |
| Alpine Linux | — | Upgrade nodejs | Jun 29, 2026 | Jun 26, 2026 |
| Amazon_linux_2023 | — | Upgrade nodejs24-debugsourceUpgrade nodejs22-npmUpgrade nodejs24-npmUpgrade nodejs24-full-i18nUpgrade v8-13.6-develUpgrade nodejs22-libsUpgrade nodejs24Upgrade nodejs24-libsUpgrade nodejs22-debugsourceUpgrade nodejs24-develUpgrade nodejs22Upgrade nodejs22-docsUpgrade nodejs22-full-i18nUpgrade nodejs22-debuginfoUpgrade nodejs24-docsUpgrade nodejs22-develUpgrade v8-12.4-develUpgrade nodejs24-debuginfoUpgrade nodejs24-libs-debuginfoUpgrade nodejs22-libs-debuginfo | Jul 8, 2026 | Jun 26, 2026 |
| Nodejs | — | Upgrade Node.js to 22.23.0, 24.17.0 or 26.3.1 or later | Oct 28, 2026 | Jun 26, 2026 |
| Oracle_linux | — | Upgrade nodejs-nodemonUpgrade nodejsUpgrade nodejs-full-i18nUpgrade nodejs-docsUpgrade nodejs-libsUpgrade v8-13.6-develUpgrade npmUpgrade nodejs-npmUpgrade nodejs-develUpgrade nodejs24-docsUpgrade nodejs24-develUpgrade nodejs24-npmUpgrade nodejs-packagingUpgrade nodejs-packaging-bundlerUpgrade nodejs24-full-i18nUpgrade nodejs24Upgrade v8-12.4-develUpgrade nodejs24-libs | Oct 22, 2026 | Jun 26, 2026 |
| Redhat_linux | — | Upgrade nodejs24-docsUpgrade nodejs-packagingUpgrade nodejs-npmUpgrade nodejs-full-i18nUpgrade nodejs-debugsourceUpgrade nodejs24-full-i18nUpgrade v8-12.4-develUpgrade nodejs-debuginfoUpgrade nodejs-libs-debuginfoUpgrade nodejs-nodemonUpgrade nodejs24-debugsourceUpgrade nodejs-packaging-bundlerUpgrade nodejs-docsNo solution existsUpgrade npmUpgrade nodejs-develUpgrade nodejs22-debuginfoUpgrade nodejs22-debugsourceUpgrade nodejs24-libs-debuginfoUpgrade nodejs24Upgrade nodejs-libsUpgrade nodejs24-npmUpgrade v8-13.6-develUpgrade nodejs24-libsUpgrade nodejs24-develUpgrade nodejsUpgrade nodejs24-debuginfo | Jul 7, 2026 | Jun 26, 2026 |
| Rocky_linux | — | Upgrade v8-13.6-develUpgrade nodejs-libs-debuginfoUpgrade nodejs24-develUpgrade nodejs22-debuginfoUpgrade nodejs-libsUpgrade nodejs-full-i18nUpgrade nodejs-npmUpgrade npmUpgrade nodejsUpgrade nodejs-develUpgrade nodejs24-libs-debuginfoUpgrade nodejs-debugsourceUpgrade nodejs-debuginfoUpgrade v8-12.4-develUpgrade nodejs24-full-i18nUpgrade nodejs22-debugsourceUpgrade nodejs24-debuginfoUpgrade nodejs24Upgrade nodejs24-libsUpgrade nodejs24-debugsource | Jul 10, 2026 | Jul 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Jun 26, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub