RuffRuff apps were not affected by the Node.js vulnerabilities disclosed on November 11, 2026. We have still updated Node.js in all seven apps to the fixed version (22.23.5).
Key points
- RuffRuff apps were not affected by these vulnerabilities
- We updated Node.js in all seven apps to the fixed version, 22.23.5
- Store owners do not need to change any settings or reinstall the apps
Apps covered by this notice
- RuffRuff 予約販売
- RuffRuff Order Limits
- RuffRuff Order Bonus
- RuffRuff Selling Periods
- RuffRuff Table of Contents
- RuffRuff Product & Blog Tags
- RuffRuff Author Profiles
What we did
On November 11, 2026, Node.js released security fixes for 16 vulnerabilities, including issues in HTTP/2, TLS, and the Permission Model.
All seven RuffRuff apps use Node.js, but they were not affected by these vulnerabilities. To keep the apps on a fixed version, we still updated them to Node.js 22.23.5.
Date applied
November 12, 2026 (JST)
What store owners need to do
You do not need to change any RuffRuff app settings or reinstall the apps in response to this issue. You can continue using them as usual.
We will provide an update if the situation changes.
