Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Node.js could let attackers run code
published 1 month ago
Summary
The Node.js software package can be tricked into executing unwanted code, which could let a bad actor take control of your system. This risk is fixed in newer versions, so update Node.js to the latest release as soon as possible. Keeping the software up to date protects your applications from this threat.
What to do
- Update cleanstart nodejs to version 26.5.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | nodejs |
< 26.5.0-r0 Fix: upgrade to 26.5.0-r0
|
Original advisory text
Security fix for CVE-2026-58040 applied in: nodejs 26.5.0-r0
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details.
Timeline
Published18 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-DG35822 · OSV
Track software like this
Free during beta