← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99048

23 October 2026

re-acquire a lock it already holds. Update the NAPI calls to use the locked versions. This issue was found in production.

Introduced

6.16606048cbd8346e616cfaee01b0143d072534136d

Fixed releases

6.18.5742935a61001927aa01db10b53b420efd37eaa99b

7.2.113d377911ce81fd4e61af814e750d8e08879a5208

7.30cb6939a4dfefa822007b7a71986e06bc4f61f54

View source announcement ↗