tocsin

CVE-2026-58045

1 advisory.

node/node CVE-2026-58045: medium 6.2

node:zlib sync APIs can crash on spoofed TypedArray length

Action: Upgrade node to 22.23.2 (22.x), 24.18.1 (24.x) or 26.5.1 (26.x) or later.

Affected

introducedfixedlast affected
22.0.022.23.2-
24.0.024.18.1-
26.0.026.5.1-

Fixed versions

22.23.224.18.126.5.1

Sources

CVE-2026-58045 · published · modified · JSON