Back to overview
Resolved

Critical NodeJS Vulnerabilities (CVE-2026-105483, CVE-2026-106069, CVE-2026-111497)

Oct 22, 2026 at 12:41am UTC
Affected services
Hosting Services

Resolved
Oct 22, 2026 at 7:20pm UTC

Security updates for the previously outstanding Node.js 16, 18 and 20 packages, and the cPanel-provided Node.js 22 package, are now available from our upstream providers.

We have completed the rollout of these security updates and restarted applications using the old versions where they can restart automatically.

Updated
Oct 22, 2026 at 3:18pm UTC

We have completed the rollout of the available Node.js 12, 14, 22, 24 and 26 security updates and restarted applications using the old versions where they can restart automatically.

Created
Oct 22, 2026 at 12:41am UTC

We're aware of several security vulnerabilities announced today by Node.js, affecting the 22.x, 24.x and 26.x release lines.

We're reviewing the impact on our services and will apply the patched versions across our servers as soon as our vendors release them.

We'll update this notice as more information becomes available.