← Database

CVE-2026-21712

MEDIUM CVSS: 6.5 Published: 2026-03-30 Modified: 2026-08-19

Description

A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.

Affected Platforms

Nodejs Node.Js

Weakness Type

CWE-20

References