Implemented multiple CVE fixes: added TLSSocket default error handler, network checks on pipe/wrap connect, stricter symlink read/write permissions, disabled futimes under permission model, rethrown stack overflow exceptions in async hoo...
Open Source changelog digest
Jan 12 - Jan 18, 2026. Useful releases, risky migrations, and noisy updates from the Open Source channel.
No matching updates in this bucket.
Open Source updates in 2026-w03
Add TLSSocket default error handler (CVE‑2025‑59465) and route TLS callback exceptions through error handlers (CVE‑2026‑21637).
Imported from changelog source; review and generate a concise summary before publishing.
Fixed multiple CVE vulnerabilities (disabled futimes with permission model, added TLSSocket default error handler, required full read/write for symlink APIs, rethrown stack overflow in async hooks, removed zero‑fill toggle from unsafe bu...