Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81540.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-81540
Upstream
  • CVE-2026-4450
Published
2026-03-20T02:16:37Z
Modified
2026-08-28T17:47:34Z
Summary
CVE-2026-4450 affecting package nodejs for versions less than 24.14.1-3
Details

Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

Affected packages

Azure Linux:3 / nodejs

Package

Name
nodejs
Purl
pkg:rpm/azure-linux/nodejs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
24.14.1-3

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-81540.json"