Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Node.js could let attackers run code

published 1 month ago

Summary

The Node.js software version 26.5.0-r0 has a security weakness that could allow a malicious person to run their own programs on your system. This could compromise data or disrupt services. Upgrade to the latest Node.js release as soon as possible to close the gap.

What to do

Update cleanstart nodejs to version 26.5.0-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	nodejs	< 26.5.0-r0 Fix: upgrade to 26.5.0-r0

Original advisory text

Security fix for CVE-2026-58039 applied in: nodejs 26.5.0-r0

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2026-58039 URL
https://nvd.nist.gov/vuln/detail/CVE-2026-58039 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-SR40385 · OSV

Track software like this

Free during beta