Node.js

Everything Patch Gazette has reported about Node.js: 2 stories, newest first. Part of our Vulnerabilities coverage.

Node.js follow-redirects 1.16.1 Fixes Credential Leakage in CVE-2026-111755

A high-severity flaw in follow-redirects allows credential headers to leak during redirects. Version 1.16.1 resolves the issue for Node.js applications.

Oct 19, 2026

Vulnerabilities

Video-stitch CVE-2026-110645 Allows OS Command Injection in Node.js

A critical flaw in Video-stitch before 2.0.0-beta.1 lets attackers run shell commands via manipulated file names in ffmpeg pipelines.

Oct 14, 2026