UpHeron
All vulnerabilities

Servers and applications

CVE-2026-106074

crypto.randomUUID() and randomInt() entropy caches are saved into user-land startup snapshots and SEAs, so every process repeats the same values

Severity
Medium
Published
21 Oct 2026
Last changed
21 Oct 2026
Added to UpHeron
22 Oct 2026
Fixed in
22.23.4, 24.22.1, 26.12.1
Sources
nodejs

Affected software

SoftwareAffected versions
Node.jsServers and applications · cpe:a:nodejs:node.js
  • From 22.0.0 before 22.23.4
  • From 24.0.0 before 24.22.1
  • From 26.0.0 before 26.12.1

References