Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.

Daily Security Brief — today's top actively-exploited and high-severity vulnerabilities.
⚡ 6 item(s) name a component we run (patch-watch).

• [HIGH] CVE-2026-58505 CVE-2026-58505: geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, … ⚡
nvd.nist.gov/vuln/detail/CVE-2026-58505
• [HIGH] CVE-2026-126051 CVE-2026-126051: A deferred-callback use-after-destroy in Node.js TLS server handshake handling allows a re… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-126051
• [HIGH] CVE-2026-123866 CVE-2026-123866: A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-123866
• [HIGH] CVE-2026-123872 CVE-2026-123872: A client certificate authentication bypass in Node.js TLS lets a client change the servern… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-123872
• [HIGH] CVE-2026-123874 CVE-2026-123874: A use-after-free in Node.js HTTP/2 lets an unauthenticated client corrupt server memory, o… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-123874
• [HIGH] CVE-2026-123864 CVE-2026-123864: A re-entrancy flaw in Node.js HTTPS lets an unauthenticated client read memory belonging t… ⚡
nvd.nist.gov/vuln/detail/CVE-2026-123864

Full brief: diginpl.com/security/brief
Sources: CISA KEV, NVD (NIST) and security news. DigiNepal links to each source; nothing is rewritten.