CVE-2026-105483: certificate SAN policy decides the risk
Node.js fixed the problem in 24.22.1 and 26.12.1 on October 21, 2026. The vendor rates it High. The advisory score is CVSS v3.0 7.4 with a network vector and high attack complexity. The CWE is 295, improper certificate validation. A DNS SAN says that the subject is identified by a…