security-advisories.json

Rama main · réplica de lectura del repositorio original.

{
  "advisories": [
    {
      "id": "HAKOPOD-2026-0001",
      "revision": 1,
      "source": "hakopod",
      "aliases": ["CVE-2026-105482", "CVE-2026-105483", "CVE-2026-106069", "CVE-2026-111497"],
      "title": "Node.js October 21, 2026 security releases (highest severity: high)",
      "message": "Node.js 22.x, 24.x and 26.x before 22.23.4, 24.22.1 and 26.12.1 are affected by CVE-2026-105482, CVE-2026-105483, CVE-2026-106069, CVE-2026-111497 (Brotli decoder out-of-bounds write) and other issues fixed in the October 21, 2026 security releases.",
      "severity": "high",
      "url": "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases",
      "published_at": "2026-10-21T00:00:00Z",
      "action": "update",
      "targets": [
        {
          "runtime": {
            "runtime": "node",
            "ranges": [
              {"introduced": "22.0.0", "fixed": "22.23.4"},
              {"introduced": "24.0.0", "fixed": "24.22.1"},
              {"introduced": "26.0.0", "fixed": "26.12.1"}
            ]
          }
        }
      ]
    }
  ]
}