← Database

CVE-2026-48933

HIGH CVSS: 7.5 Published: 2026-06-26 Modified: 2026-08-10

Description

A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.

Affected Platforms

Nodejs Node.Js

Weakness Type

CWE-190, CWE-770

References