From c8a83d613993f38528cc55e5de494e2271b1d7c2 Mon Sep 17 00:00:00 2001 From: MHRoni Date: Wed, 24 Jun 2026 18:20:46 +0600 Subject: [PATCH 1/2] Fix typos in June 2026 security release notes (#8970) Corrected typos in the description of CVE-2026-48618. Signed-off-by: MHRoni --- .../en/blog/vulnerability/june-2026-security-releases.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/site/pages/en/blog/vulnerability/june-2026-security-releases.md b/apps/site/pages/en/blog/vulnerability/june-2026-security-releases.md index 80f50c40ab0f9..5dbec23ecca0d 100644 --- a/apps/site/pages/en/blog/vulnerability/june-2026-security-releases.md +++ b/apps/site/pages/en/blog/vulnerability/june-2026-security-releases.md @@ -29,9 +29,9 @@ This vulnerability affects all supported release lines: **Node.js 22**, **Node.j Thank you, to erichen for reporting this vulnerability and thank you Filip Skokan for fixing it. -## Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat (CVE-2026-48618) - (high) +## Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch (CVE-2026-48618) - (high) -A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. +A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismatch. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. From 71312e293cf5eda7d873e1d7628b7c32dafa5b77 Mon Sep 17 00:00:00 2001 From: Aviv Keller Date: Wed, 24 Jun 2026 16:28:07 -0400 Subject: [PATCH 2/2] feat(banner): add RenderATL (#8972) Signed-off-by: Aviv Keller --- apps/site/site.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/apps/site/site.json b/apps/site/site.json index 86a3100ad6cca..15be7512941e3 100644 --- a/apps/site/site.json +++ b/apps/site/site.json @@ -29,11 +29,11 @@ ], "websiteBanners": { "index": { - "startDate": "2026-06-16T22:00:00.000Z", - "endDate": "2026-06-23T22:00:00.000Z", - "text": "June Security Release is available", - "link": "https://nodejs.org/en/blog/vulnerability/june-2026-security-releases", - "type": "warning" + "startDate": "2026-06-24T00:00:00.000Z", + "endDate": "2026-08-14T00:00:00.000Z", + "text": "Don't miss Node.js Interactive at RenderATL, August 12–13!", + "link": "https://www.renderatl.com/tickets", + "type": "default" } }, "websiteBadges": {