RHSA-2026:2864
RHSA-2026:2864 · Red Hat Security Advisory: nodejs:22 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: nodejs:22 security update
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nodejs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.22.0-1.module+el9.6.0+23985+21730e4b
Update to 1:22.22.0-1.module+el9.6.0+23985+21730e4b
nodejs-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.22.0-1.module+el9.6.0+23985+21730e4b
Update to 1:22.22.0-1.module+el9.6.0+23985+21730e4b
nodejs-debugsource Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.22.0-1.module+el9.6.0+23985+21730e4b
Update to 1:22.22.0-1.module+el9.6.0+23985+21730e4b
nodejs-devel Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.22.0-1.module+el9.6.0+23985+21730e4b
Update to 1:22.22.0-1.module+el9.6.0+23985+21730e4b
nodejs-docs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.22.0-1.module+el9.6.0+23985+21730e4b
Update to 1:22.22.0-1.module+el9.6.0+23985+21730e4b
nodejs-full-i18n Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.22.0-1.module+el9.6.0+23985+21730e4b
Update to 1:22.22.0-1.module+el9.6.0+23985+21730e4b
nodejs-libs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.22.0-1.module+el9.6.0+23985+21730e4b
Update to 1:22.22.0-1.module+el9.6.0+23985+21730e4b
nodejs-libs-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.22.0-1.module+el9.6.0+23985+21730e4b
Update to 1:22.22.0-1.module+el9.6.0+23985+21730e4b
nodejs-nodemon Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.0.1-1.module+el9.6.0+23473+45664c2d
Update to 0:3.0.1-1.module+el9.6.0+23473+45664c2d
nodejs-packaging Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2021.06-4.module+el9.6.0+23473+45664c2d
Update to 0:2021.06-4.module+el9.6.0+23473+45664c2d
nodejs-packaging-bundler Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2021.06-4.module+el9.6.0+23473+45664c2d
Update to 0:2021.06-4.module+el9.6.0+23473+45664c2d
npm Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:10.9.4-1.22.22.0.1.module+el9.6.0+23985+21730e4b
Update to 1:10.9.4-1.22.22.0.1.module+el9.6.0+23985+21730e4b
v8-12.4-devel Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 3:12.4.254.21-1.22.22.0.1.module+el9.6.0+23985+21730e4b
Update to 3:12.4.254.21-1.22.22.0.1.module+el9.6.0+23985+21730e4b
Original sources
- https://access.redhat.com/errata/RHSA-2026:2864
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2431349
- https://bugzilla.redhat.com/show_bug.cgi?id=2431350
- https://bugzilla.redhat.com/show_bug.cgi?id=2431352
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2864.json
- https://access.redhat.com/security/cve/CVE-2025-55130
- https://www.cve.org/CVERecord?id=CVE-2025-55130
- https://nvd.nist.gov/vuln/detail/CVE-2025-55130
- https://nodejs.org/en/blog/vulnerability/december-2025-security-releases
- https://access.redhat.com/security/cve/CVE-2025-55131
- https://www.cve.org/CVERecord?id=CVE-2025-55131
- https://nvd.nist.gov/vuln/detail/CVE-2025-55131
- https://access.redhat.com/security/cve/CVE-2025-59465
- https://www.cve.org/CVERecord?id=CVE-2025-59465
- https://nvd.nist.gov/vuln/detail/CVE-2025-59465
- https://access.redhat.com/security/cve/CVE-2025-59466
- https://bugzilla.redhat.com/show_bug.cgi?id=2431343
- https://www.cve.org/CVERecord?id=CVE-2025-59466
- https://nvd.nist.gov/vuln/detail/CVE-2025-59466
- https://access.redhat.com/security/cve/CVE-2026-21637
- https://bugzilla.redhat.com/show_bug.cgi?id=2431340
- https://www.cve.org/CVERecord?id=CVE-2026-21637
- https://osv.dev/vulnerability/RHSA-2026:2864