🎯 New Report #3546390: Assertion error in node url.cc via malformed URL format leads to Node.js crash
🔺Severity: Medium
👽 Reporter: rafaelgss
⭐️ Reputation: null
🛠 State: resolved
💼 Team: Node.js
💵 Bounty: null
🕐 Submitted: 2026-02-09
⏰ Disclosed: 2026-03-26 15:41:58
📝 Summary: An assertion error in node url.cc via malformed URL format leads to a Node.js crash. A flaw in the URL processing caused an assertion failure in the native code when url.format() was called with a malformed internationalized domain name containing invalid characters, crashing the Node.js process. This vulnerability affected Node.js versions 24.x and 25.x.
📂 Report JSON File: 3546390
@hackeronereports