CVE-2026-123864 | Node.js up to 22.23.4/24.22.2/26.13.0 TLSWrap TLSWrap::DoWrite use after free

A vulnerability has been found in Node.js up to 22.23.4/24.22.2/26.13.0 and classified as critical. Impacted is the function TLSWrap::DoWrite of the component TLSWrap. The manipulation leads to use after free.

This vulnerability is referenced as CVE-2026-123864. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More