CVE-2026-21712 | Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1 URL node_url.cc url.format assertion

A vulnerability classified as problematic was found in Node.js up to 20.20.1/22.22.1/24.14.0/25.8.1. Affected is the function url.format of the file node_url.cc of the component URL Handler. The manipulation results in reachable assertion.

This vulnerability is cataloged as CVE-2026-21712. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.