Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-58040 →
ALPINE-CVE-2026-58040
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix o...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934).
This vulnerability affects Node.js 22.x, 24.x, and 26.x.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.21
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.23.2-r0"}]}]
Alpine:v3.22
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"22.23.2-r0"}]}]
Alpine:v3.23
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.18.1-r0"}]}]
Alpine:v3.24
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.18.1-r0"}]}]
Références
- advisory security.alpinelinux.org