GitVibes daily briefing · 2026-10-24 · runtime
2026-10-21, Version 22.23.4 'Jod' (LTS), @aduh95
Curated by Krishna
Perspective
I’m curious how the new TLS check for non‑canonical IP addresses might affect our services; a focused benchmark would help before assuming it’s a free win.
Source summary
This is a security release. Notable Changes ( CVE-2026-105481 ) http: ensure agent data guard works without I/O (James M Snell) ( CVE-2026-105482 ) dns: validate resolve inputs for null bytes (James M Snell) ( CVE-2026-106069 ) tls: reject non-canonical IP addresses (Matteo Collina) ( CVE-2026-106073 ) permission: check permission model in realpathSync…
Original reporting: Node.js · Published 2026-10-21