CVE-2026-105481: Node.js advisory for Debian 12
Summary
DEBIAN-CVE-2026-105481: The reported issue affects Node.js installations, but the supplied advisory does not describe the vulnerability class, technical impact, or attacker capabilities. Affects nodejs versions 18.13.0+dfsg1-1 – 24.22.0+dfsg+~cs24.19.2-2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Node.js is a JavaScript runtime in the Debian ecosystem. It provides an environment for running JavaScript outside a browser and is used by applications and services that depend on server-side JavaScript. The supplied advisory identifies the Debian 12 source package but does not provide further details about Node.js usage or the affected component.
Vulnerability Detail
The supplied advisory does not identify a vulnerability class, affected function, or technical impact for Node.js. It records the issue as affecting the Debian 12 package from the beginning of its version range, but provides no upper bound or fixed version. The advisory also does not describe attacker prerequisites, exploitation conditions, or consequences, so those details are not published in the supplied data.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
AI-generated workaround (not vendor-documented): Restrict access to Node.js services and disable exposed functionality that may be affected until advisory details or a fix are available. The supplied data does not document a specific mitigation.
Conclusion
No fixed version is published for Node.js in the supplied Debian 12 advisory. Restrict access to services and exposed functionality while awaiting further advisory details or a fix. The supplied data does not provide a CVSS score or technical description of the issue. Vulert monitors the dependencies in a manifest file like package-lock.json and alerts when a new vulnerability affects them; check an application at https://vulert.com/scanner.
See every vulnerability recorded for nodejs →
FAQ
The advisory marks the Node.js Debian 12 range as introduced at 0, with no upper bound or fixed version published.
The supplied advisory does not describe attacker actions or impact for Node.js, so those details are not published.
No fixed version or upgrade command is published for Node.js in the supplied Debian 12 advisory.
Restrict access to Node.js services and disable exposed functionality that may be affected; this is an AI-generated mitigation, not vendor guidance.
Inspect the application’s dependency manifest or SBOM for Node.js. Vulert can scan a manifest or SBOM and monitor the dependency at Vulert Scanner.
References
Related vulnerabilities
Recent vulnerabilities recorded for nodejs.
