Elitehost - Node.js Security Vulnerabilities Patched – Incident details

All systems operational

Show current status

Node.js Security Vulnerabilities Patched

Resolved92 hours 47 minutes

Affected

Web Hosting Services

Operational from 12:03 PM to 8:50 AM

  • ResolvedUTC
    This incident has been resolved.
  • MonitoringUTC

    Security updates addressing Node.js vulnerabilities, including CVE-2026-111497, have been installed across all our hosting servers for all versions we provide through Node.js Selector (Setup Node.js App in cPanel).

    Node.js 22, 24 and 26 have been updated to 22.23.4, 24.22.1 and 26.12.1. Versions 10, 12, 14, 16, 18, 19 and 20 have received vendor-provided backported security fixes.

    Older Node.js versions retain their existing release numbers because CloudLinux has backported the security fixes into updated package builds.

    All Node.js applications have been restarted to ensure the patched runtime is active. No action is required from your side.

    We recommend keeping your application and its dependencies updated and using an actively supported Node.js version (Node.js 22 or later).