No impact incident
CloudLinux: Node.js security releases, November 11, 2026
Nov 5, 2026, 17:33 UTC
started
ongoing
not resolved yet
—
duration
Affected: Node.js Selector
Current status of CloudLinux: Operational — live CloudLinux status
Timeline
- Nov 5, 2026, 17:33 UTCinvestigatingNode.js has announced security releases for the 22.x, 24.x, and 26.x lines, planned for Wednesday, November 11, 2026 (or shortly after). The highest severity of the fixed issues is High. We will publish the vulnerability details and CVE IDs with the release. What we are doing: - We will start building patched packages as soon as Node.js publishes the fixes, and plan to release alt-nodejs 22, 24, and 26 later the same day. - Older alt-nodejs versions (such as 18 and 20) will also receive backported fixes. The timing will be announced separately. - We will share an ETA early on Tuesday, November 10, and post progress updates here every few hours until the packages are available. Upstream advisory: https://nodejs.org/en/blog/vulnerability/november-2026-security-releases
Updates as published by CloudLinux (original).
Other services with incidents at the same time
- eXp 18:27 UTC · [Synthetics] Health Check | lwtrx.expglobal.partners is DOWN
- Vercel 18:25 UTC · Build delays and degraded Vercel Dashboard performance
- Articulate 18:24 UTC · Articulate 360: Some customers may experience connectivity issues
- Optum 18:23 UTC · System Incident - Medical Network-Portal - Production
- Lightspeed 18:01 UTC · A possible delay for Nov 4 2026 payouts may be experienced by a subset of L & K series merchants
- SerpApi 17:46 UTC · [DuckDuckGo Search API] Performance Degradation
- Worldpay 17:46 UTC · INC0719027 - Worldwide Payment Gateway (WPG) - Mastercard and Visa dual-branded Carte Bancaire
- Linode 17:40 UTC · Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability [CVE-2026-123158]
- Mercado Pago 17:20 UTC · ALL SITES - Delay in Webhook Payments notifications
- Clarivate 17:12 UTC · FoundationIP – Email Notification Delays
- UiPath 17:09 UTC · [Canada] [Automation Hub] Sporadic login failures
- Dutchie 17:09 UTC · Massachusetts Delivery Errors
- Hostinger 17:09 UTC · Degraded Server US-867 Performance
- Jobvite Operational 16:50 UTC · Candidate applications failing to submit on career sites
- GitHub 16:50 UTC · Incident with Actions
More CloudLinux incidents
- November 6, 2026 sock-gettstamp-uaf (CVE-2026-98276): UDP socket use-after-free, local crash, KernelCare status
- October 30, 2026 CVE-2026-98432 (Linux kernel IPv4 TCP) on CloudLinux OS 8, 9 and 10
- October 23, 2026 ZDI-CAN-33367: Linux Kernel Local Root Zero-Day, Mitigation for CloudLinux
- October 23, 2026 Ruby security releases, October 2026: CVE-2026-97229 and 3 other CVEs
- October 22, 2026 Node.js security releases, October 2026: CVE-2026-111497 and 9 other CVEs
- October 20, 2026 Critical PHP vulnerabilities CVE-2026-109618 / CVE-2026-109619 - release 21 October 2026, 14:00 UTC