CVE-2026-58042 | Node.js prior 22.23.1/24.18.0/26.5.0 DNS Resolution dns.resolveAny resource consumption

August 4, 2026 Yanac

A vulnerability identified as problematic has been detected in Node.js. Affected by this vulnerability is the function dns.resolveAny of the component DNS Resolution. Performing a manipulation results in resource consumption.

This vulnerability is reported as CVE-2026-58042. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More