{
  "id": 17746552,
  "title": "Testing the fullwidth-IPv4 certificate path in CVE-2026-105483",
  "url": "https://urgent.news/2026/11/02/testing-the-fullwidth-ipv4-certificate-path-in-cve-2026-105483",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-02T05:04:39.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/onaeiuspkz/testing-the-fullwidth-ipv4-certificate-path-in-cve-2026-105483-32cg"
  },
  "original_language": "en",
  "account": null,
  "summary": "The article discusses a regression test for CVE-2026-105483, a vulnerability in Node.js 24.x and 26.x versions that could allow a fullwidth-digit IPv4 host to be normalized and resolved, causing a TLS certificate to be authenticated against a DNS name without a matching IP SAN. The issue is rated High, with a CVSS v3.0 score of 7.4 and CWE-295. To test the vulnerability, a private test CA and a local TLS endpoint should be set up, with a certificate containing only a DNS SAN containing the canonical address, such as 127.0.0.1. The test should assert rejection and the error class, not just a timeout failure. The test should also include controls for certificates with correct IP address SANs and DNS SANs for normal names. The affected Node.js versions are 24.x before 24.22.1 and 26.x before 26.12.1, while the 22.x line is not listed as affected. The article also suggests adding tests for hostile input forms and verifying the deployed artifact's runtime version and image digest.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}