| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | ≥ 24.0.0, ≤ 24.14.0≥ 25.0.0, ≤ 25.8.1 |
A flaw in Node.js URL processing causes an assertion failure in native code when `url.format()` is called with a malformed internationalized domain name (IDN) containing invalid characters, crashing the Node.js process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free