Repository navigation
GHSA-mjjp-xjfg-97wg (LIEF) found on v26.x #342
Description
Activity
The existing update PR nodejs/node#66240 includes the null check from the upstream fix for CVE-2025-15504 / GHSA-mjjp-xjfg-97wg, but targets main. The bundled code on v26.x still lacks that check, so v26.x needs a corresponding update or backport.
Keeping this issue open until the fix ships in a v26 release.
- added a commit that references this issue
on Sep 27, 2026 - added a commit that references this issue
on Sep 27, 2026 - added a commit that references this issue
on Sep 28, 2026 - added a commit that references this issue
on Sep 28, 2026
A new vulnerability for LIEF 0.17.0 was found:
Vulnerability ID: GHSA-mjjp-xjfg-97wg
Vulnerability URL: GHSA-mjjp-xjfg-97wg
Failed run: https://github.com/nodejs/nodejs-dependency-vuln-assessments/actions/runs/29592007779