Node browser runtime release notesRSS

Security patches

OS vulnerabilities:

• CVE-2026-35189
• CVE-2026-54872
• CVE-2026-75805
• CVE-2026-75806
• CVE-2026-77696
• CVE-2026-84384
• CVE-2026-84447
• CVE-2026-84448
• CVE-2026-84449
• CVE-2026-84782
• CVE-2026-86219
• CVE-2026-94287
• CVE-2026-95512
• CVE-2026-96889

Library vulnerabilities:

• CVE-2026-104844

Bug fixes

• Fixed 12–30 second click delays on Angular and Zone.js applications. The Synthetics browser extension is now loaded via CDP WebSocket (Extensions.loadUnpacked) instead of BiDi (webExtension.install). Chrome 153+ BiDi introduced a "Waiting for pending navigations" check after every click that stalled responses on apps with pending macrotasks. Switching to CDP keeps BiDi out of the session, restoring ChromeDriver's classic sub-millisecond document.readyState navigation check.

Security patches

Upgraded Chrome from version 153.0.8010.47-1 to 154.0.8037.57-1.

OS vulnerabilities:

• CVE-2025-59375
• CVE-2026-15588
• CVE-2026-16118
• CVE-2026-32776
• CVE-2026-32777
• CVE-2026-32778
• CVE-2026-39919
• CVE-2026-41080
• CVE-2026-45186
• CVE-2026-50219
• CVE-2026-56403
• CVE-2026-56404
• CVE-2026-56405
• CVE-2026-56408
• CVE-2026-56412
• CVE-2026-58010
• CVE-2026-58011
• CVE-2026-58012
• CVE-2026-58013
• CVE-2026-58014
• CVE-2026-58015
• CVE-2026-58016
• CVE-2026-74860
• CVE-2026-82474
• CVE-2026-86140

Library vulnerabilities:

• CVE-2026-17495
• CVE-2026-18149
• CVE-2026-18540
• CVE-2026-19534
• CVE-2026-77301
• CVE-2026-84890
• CVE-2026-84933
• CVE-2026-84947
• CVE-2026-84961
• CVE-2026-85008
• CVE-2026-85014
• CVE-2026-85024
• CVE-2026-90771
• CVE-2026-90776
• CVE-2026-92000
• CVE-2026-92599

버그 수정

• 스크립트 브라우저 모니터의 VM 영역 프로토타입 불일치로 인해 발생한 $webDriver/$browser 반환 값의 deepStrictEqual/strictEqual 실패를 수정했습니다.

보안 패치

Chrome을 버전 152.0.7977.82-1에서 153.0.8010.47-1로 업그레이드했습니다.

OS 취약점:

• CVE-2026-56208
• CVE-2026-56209
• CVE-2026-56210
• CVE-2026-56211

Enhancements

Added AbortController and AbortSignal as available host globals in the Scripted Browser monitor runtime sandbox.

Bug fixes

Removed the --jitless Chrome JS flag to re-enable JIT compilation, improving script execution performance for Scripted Browser monitors.

Bug fixes

Fixed a Chrome initialization delay of up to 5 minutes on private locations by bypassing Selenium Manager outbound ChromeDriver discovery calls and setting the ChromeDriver path explicitly.

Security patches

Strengthened script sandbox isolation for Scripted Browser Monitor runtime by migrating to vm.runInNewContext for robust V8 context separation.

Upgraded Chrome from version 152.0.7977.64-1 to 152.0.7977.82-1.

Fixed the following vulnerabilities:

OS vulnerabilities:

• CVE-2026-46275
• CVE-2026-53357
• CVE-2026-64015
• CVE-2026-64018
• CVE-2026-64032
• CVE-2026-64073
• CVE-2026-64115
• CVE-2025-71289
• CVE-2026-23469
• CVE-2026-31420
• CVE-2026-31486
• CVE-2026-31560
• CVE-2026-46158
• CVE-2026-46170
• CVE-2026-46315
• CVE-2026-52912
• CVE-2026-52915
• CVE-2026-52916
• CVE-2026-52918
• CVE-2026-52919
• CVE-2026-52921
• CVE-2026-52922
• CVE-2026-52926
• CVE-2026-52941
• CVE-2026-64025
• CVE-2026-64029
• CVE-2026-64033
• CVE-2026-64039
• CVE-2026-64046
• CVE-2026-64047
• CVE-2026-64048
• CVE-2026-64051
• CVE-2026-64055
• CVE-2026-64056
• CVE-2026-64064
• CVE-2026-64083
• CVE-2026-64084
• CVE-2026-64085
• CVE-2026-64086
• CVE-2026-64087
• CVE-2026-64088
• CVE-2026-64089
• CVE-2026-64092
• CVE-2026-64096
• CVE-2026-64097
• CVE-2026-64098
• CVE-2026-64102
• CVE-2026-64106
• CVE-2026-64108
• CVE-2026-64109
• CVE-2026-64111
• CVE-2026-64113
• CVE-2026-64114
• CVE-2026-64116
• CVE-2026-64118
• CVE-2026-64121
• CVE-2026-64125
• CVE-2026-64126
• CVE-2026-64127
• CVE-2026-64128
• CVE-2026-64133
• CVE-2026-64134
• CVE-2026-64135
• CVE-2026-64136
• CVE-2026-64137
• CVE-2026-64138
• CVE-2026-64144
• CVE-2026-64147
• CVE-2026-64148
• CVE-2026-64155
• CVE-2026-64163
• CVE-2026-64165
• CVE-2026-64166
• CVE-2026-64168
• CVE-2026-64170
• CVE-2026-64173
• CVE-2026-64174
• CVE-2026-64177
• CVE-2026-64178
• CVE-2026-64179
• CVE-2026-64180
• CVE-2026-64182
• CVE-2026-64183
• CVE-2026-64184
• CVE-2026-64185
• CVE-2026-64214
• CVE-2026-64217
• CVE-2026-64218
• CVE-2026-64219
• CVE-2026-64220
• CVE-2026-64221
• CVE-2026-64225
• CVE-2026-64231
• CVE-2026-64518
• CVE-2026-57062
• CVE-2026-64034
• CVE-2026-64103
• CVE-2026-64153

Library vulnerabilities:

• CVE-2026-84367
• CVE-2026-84368
• CVE-2026-84375
• GHSA-2x7j-588g-ccc2
• GHSA-8m3c-c648-2xjj
• GHSA-cc9r-2j5m-2m83
• GHSA-wmmp-3585-3rmp
• GHSA-x5fp-wj9c-mxmx
• GHSA-4mjr-xmp4-gh2g
• CVE-2026-82417
• CVE-2026-82562

Security patches

Upgraded Chrome from version 151.0.7922.173-1 to 152.0.7977.64-1.

Fixed the following vulnerabilities:

OS vulnerabilities:

• CVE-2024-2236
• CVE-2025-5278
• CVE-2025-6141
• CVE-2025-15649
• CVE-2026-7017
• CVE-2026-9538
• CVE-2026-12087
• CVE-2026-13221
• CVE-2026-13595
• CVE-2026-13757
• CVE-2026-18938
• CVE-2026-27171
• CVE-2026-27456
• CVE-2026-42250
• CVE-2026-48959
• CVE-2026-48962
• CVE-2026-53612
• CVE-2026-53613
• CVE-2026-53614
• CVE-2026-53615
• CVE-2026-53910
• CVE-2026-54371
• CVE-2026-57432
• CVE-2026-57433
• CVE-2026-59843
• CVE-2026-59845
• CVE-2026-59846
• CVE-2026-59847
• CVE-2026-59848
• CVE-2026-59850
• CVE-2026-62291

Library vulnerabilities:

• CVE-2026-55553

Security patches

Upgraded Chrome from version 151.0.7922.137-1 to 151.0.7922.173-1.

Fixed the following vulnerabilities:

OS vulnerabilities:

• CVE-2026-53224
• CVE-2026-64531
• CVE-2026-11856
• CVE-2026-53246
• CVE-2026-62289
• CVE-2026-53247
• CVE-2026-8932

Library vulnerabilities:

• CVE-2026-55553

Chrome vulnerabilities:

• CVE-2026-76033
• CVE-2026-76034
• CVE-2026-76035
• CVE-2026-76036
• CVE-2026-76038
• CVE-2026-76039
• CVE-2026-76040
• CVE-2026-76041
• CVE-2026-76042
• CVE-2026-76043
• CVE-2026-76044
• CVE-2026-76045
• CVE-2026-76046
• CVE-2026-76047