A vulnerability in Node.js allows the `dns.resolve` function to improperly handle domain names containing null bytes, potentially causing domain name truncation and inconsistent hostname validation. This could allow applications relying on hostname validation to process unintended domain names. The issue affects Node.js 22.x, 24.x, and 26.x release lines. Upgrade to a patched version to address the vulnerability.