node-modules CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH node-modules CVE published 2026-08-25

CVE-2026-55553

CVE-2026-55553 debrief based on the supplied source corpus. The urllib library for Node.js has a vulnerability where it reuses caller-supplied options across origins during redirects, potentially exposing credentials to an attacker-controlled origin. This issue affects urllib versions before 2.44.1 and 4.9.1. Defenders should assess exposure and apply patches. The vulnerability allows unauthorized access [truncated]