Critical NodeJS Vulnerabilities (CVE-2026-105483, CVE-2026-106069, CVE-2026-111497)
Resolved
Oct 22, 2026 at 7:20pm UTC
Security updates for the previously outstanding Node.js 16, 18 and 20 packages, and the cPanel-provided Node.js 22 package, are now available from our upstream providers.
We have completed the rollout of these security updates and restarted applications using the old versions where they can restart automatically.
Affected services
Updated
Oct 22, 2026 at 3:18pm UTC
We have completed the rollout of the available Node.js 12, 14, 22, 24 and 26 security updates and restarted applications using the old versions where they can restart automatically.
Affected services
Created
Oct 22, 2026 at 12:41am UTC
We're aware of several security vulnerabilities announced today by Node.js, affecting the 22.x, 24.x and 26.x release lines.
We're reviewing the impact on our services and will apply the patched versions across our servers as soon as our vendors release them.
We'll update this notice as more information becomes available.
Affected services