AZL-94337
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-94337.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-94337
- Upstream
- Published
- 2026-07-30T06:25:55Z
- Modified
- 2026-08-28T17:47:40.768296930Z
- Summary
- CVE-2026-56850 affecting package nodejs for versions less than 24.18.1-1
- Details
-
A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.
This vulnerability affects Node.js 26.x, 24.x, and 22.x.
- References