René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Openssl vulnerabilities in node22 releases","articleBody":"We are using node 22.22.1 (https://nodejs.org/en/download/archive/v22.22.1) and it has several CVEs related to openssl:\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31789\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31789\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-28389\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-28390\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31790\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-28388\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-28387\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-2673\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-28387\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-28390\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-28388\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-28389\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-31790\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-2673\n\nWe tracked and upgraded to several minor releases for node 22, but no release adopted latest openssl that can fix above CVEs. Is there any specific reason why node is not upgrading the openssl version?\nAWS inspector is flagging all our images as vulnerable and asking to switch from 3.5.5 to 3.6.2.","author":{"url":"https://github.com/shindesayalip","@type":"Person","name":"shindesayalip"},"datePublished":"2026-05-07T11:52:04.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/63166/node/issues/63166"}