RHSA-2026:2767
RHSA-2026:2767 · Red Hat Security Advisory: nodejs:20 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: nodejs:20 security update
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nodejs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
Update to 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
nodejs-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
Update to 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
nodejs-debugsource Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
Update to 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
nodejs-devel Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
Update to 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
nodejs-docs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
Update to 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
nodejs-full-i18n Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
Update to 1:20.20.0-1.module+el9.6.0+23988+6b9eae47
nodejs-nodemon Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.0.1-1.module+el9.6.0+23146+be9976bd
Update to 0:3.0.1-1.module+el9.6.0+23146+be9976bd
nodejs-packaging Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2021.06-4.module+el9.6.0+23146+be9976bd
Update to 0:2021.06-4.module+el9.6.0+23146+be9976bd
nodejs-packaging-bundler Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2021.06-4.module+el9.6.0+23146+be9976bd
Update to 0:2021.06-4.module+el9.6.0+23146+be9976bd
npm Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:10.8.2-1.20.20.0.1.module+el9.6.0+23988+6b9eae47
Update to 1:10.8.2-1.20.20.0.1.module+el9.6.0+23988+6b9eae47
Original sources
- https://access.redhat.com/errata/RHSA-2026:2767
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2431349
- https://bugzilla.redhat.com/show_bug.cgi?id=2431350
- https://bugzilla.redhat.com/show_bug.cgi?id=2431352
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2767.json
- https://access.redhat.com/security/cve/CVE-2025-55130
- https://www.cve.org/CVERecord?id=CVE-2025-55130
- https://nvd.nist.gov/vuln/detail/CVE-2025-55130
- https://nodejs.org/en/blog/vulnerability/december-2025-security-releases
- https://access.redhat.com/security/cve/CVE-2025-55131
- https://www.cve.org/CVERecord?id=CVE-2025-55131
- https://nvd.nist.gov/vuln/detail/CVE-2025-55131
- https://access.redhat.com/security/cve/CVE-2025-59465
- https://www.cve.org/CVERecord?id=CVE-2025-59465
- https://nvd.nist.gov/vuln/detail/CVE-2025-59465
- https://access.redhat.com/security/cve/CVE-2025-59466
- https://bugzilla.redhat.com/show_bug.cgi?id=2431343
- https://www.cve.org/CVERecord?id=CVE-2025-59466
- https://nvd.nist.gov/vuln/detail/CVE-2025-59466
- https://access.redhat.com/security/cve/CVE-2026-21637
- https://bugzilla.redhat.com/show_bug.cgi?id=2431340
- https://www.cve.org/CVERecord?id=CVE-2026-21637
- https://osv.dev/vulnerability/RHSA-2026:2767