Search: CVE-2026-87018

Multiple security vulnerabilities affecting Node.js and its dependencies in Red Hat Enterprise Linux 10 have been addressed in an important security update. These include denial of service issues via uncontrolled recursion and stack exhaustion in brace-expansion, denial of service via unhandled stream errors and TLS renegotiation in undici, certificate validation bypass, cache poisoning, TLS certificate hostname bypass, and DNS hostname truncation vulnerabilities. The update fixes these issues to improve the security posture of Node.js runtime and related libraries.