oss-security - Re: NodeJS Security Releases (CVE-2025-55131, CVE-2025-55130, CVE-2025-59465, and others)

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <aWb05sqft073wame@netmeister.org>
Date: Tue, 13 Jan 2026 20:44:06 -0500
From: Jan Schaumann <jschauma@...meister.org>
To: oss-security@...ts.openwall.com
Subject: Re: NodeJS Security Releases (CVE-2025-55131,
 CVE-2025-55130, CVE-2025-59465, and others)

Alan Coopersmith <alan.coopersmith@...cle.com> wrote:

> The node.js team has also published a much more in-depth discussion at:
> https://nodejs.org/en/blog/vulnerability/january-2026-dos-mitigation-async-hooks

Thanks for that - this link would have been useful for
the NodeJS team to share on their nodejs-sec mailing
list.

> with a shorter intro in the thread starting at:
> https://x.com/matteocollina/status/2011137343323865196

Here's a link that doesn't require an account on, uhm,
_that_ platform:

https://nitter.net/matteocollina/status/2011137343323865196#m

-Jan

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.