Node.js released security fixes for versions 22.x, 24.x and 26.x, including a vulnerability rated high severity. These flaws affect a runtime widely used by crypto platforms to operate exchange backends, trading bots, wallet interfaces and analytics tools. Depending on the exploitation scenario, they could allow an attacker to disrupt a service, intercept traffic or execute code remotely. Node.js was still one of the last two runtimes without a fix for the compromise of eight private keys belonging to the Indian certificate authority eMudhra. No such attack has been reported, and the main risk concerns third-party services that delay applying updates.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
