Our servers are protected against the PHP security vulnerability disclosed in October. The update was installed on 21 October 2026. More about php2shell

Node.js 26

Node.js 26 gets security updates until 30/04/2029.

Supported

Latest version: 26.13.0, released on 28/10/2026

End of support: 30/04/2029

No known vulnerability open in 26.13.0

Vulnerabilities in Node.js 26

15 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 03/11/2026.

CVE-2026-111497, CVSS 4.0: 9.2, actively exploited: fixed in 26.12.1
CVE-2026-48930, CVSS 3.1: 9.8: not affected in 26.13.0
CVE-2026-58043, CVSS 3.1: 8.4: not affected in 26.13.0
CVE-2026-48617, CVSS 3.1: 8.2: not affected in 26.13.0
CVE-2026-48933, CVSS 3.1: 7.5: not affected in 26.13.0
CVE-2026-48619, CVSS 3.1: 7.5: not affected in 26.13.0
CVE-2026-48615, CVSS 3.1: 7.5: not affected in 26.13.0
CVE-2026-48618, CVSS 3.1: 6.5: not affected in 26.13.0
CVE-2026-56847, CVSS 3.1: 6.1: not affected in 26.13.0
CVE-2026-48928, CVSS 3.1: 5.4: not affected in 26.13.0
CVE-2026-56850, CVSS 3.1: 4.4: not affected in 26.13.0
CVE-2026-48934, CVSS 3.0: 4.3: not affected in 26.13.0
CVE-2026-48931, CVSS 3.1: 3.7: not affected in 26.13.0
CVE-2026-48936, CVSS 3.0: 3.3: not affected in 26.13.0
CVE-2026-48935, CVSS 3.0: 3.3: not affected in 26.13.0

2 vulnerabilities of Node.js have no version information in the NVD and are not assigned to any branch.

Get notified

Add Node.js with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.

Watch Node.js 26

Already have an account? Log in and add Node.js 26

All branches of Node.js

Vulnerabilities Software A-Z Imprint Privacy Accessibility English Deutsch © 2026 Erseni