AZL-105561

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105561.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-105561

Upstream

CVE-2026-73064

Published

2026-09-24T15:17:34Z

Modified

2026-10-05T05:34:30Z

Summary

CVE-2026-73064 affecting package nodejs 24.21.0-1

Details

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-73064

Affected packages

Azure Linux:3 / nodejs

Package

Name: nodejs
Purl: pkg:rpm/azure-linux/nodejs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

24.21.0-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105561.json"