Vulnerability in Node.js URL Processing Affects Malformed IDNs

CVE-2026-21712

What is CVE-2026-21712?

A flaw in Node.js URL processing can cause an assertion failure when the url.format() function is invoked with an improperly formatted internationalized domain name (IDN). This issue triggers a crash in the Node.js process, potentially disrupting web applications that rely on accurate URL formatting and processing. Developers are advised to update to the latest security version to mitigate this risk and ensure robust application performance.

References