CVE-2026-48933: A flaw in Node.js WebCrypto implementation can crash the
A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
- EPSS 3.7% (88.9% percentile)
- CVSS 7.5 high