RHSA-2026:52399
RHSA-2026:52399 · Red Hat Security Advisory: nodejs:22 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: nodejs:22 security update
CVSS 8.1 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nodejs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.23.1-2.module+el9.6.0+24604+449f851b
Update to 1:22.23.1-2.module+el9.6.0+24604+449f851b
nodejs-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.23.1-2.module+el9.6.0+24604+449f851b
Update to 1:22.23.1-2.module+el9.6.0+24604+449f851b
nodejs-debugsource Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.23.1-2.module+el9.6.0+24604+449f851b
Update to 1:22.23.1-2.module+el9.6.0+24604+449f851b
nodejs-devel Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.23.1-2.module+el9.6.0+24604+449f851b
Update to 1:22.23.1-2.module+el9.6.0+24604+449f851b
nodejs-docs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.23.1-2.module+el9.6.0+24604+449f851b
Update to 1:22.23.1-2.module+el9.6.0+24604+449f851b
nodejs-full-i18n Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.23.1-2.module+el9.6.0+24604+449f851b
Update to 1:22.23.1-2.module+el9.6.0+24604+449f851b
nodejs-libs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.23.1-2.module+el9.6.0+24604+449f851b
Update to 1:22.23.1-2.module+el9.6.0+24604+449f851b
nodejs-libs-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:22.23.1-2.module+el9.6.0+24604+449f851b
Update to 1:22.23.1-2.module+el9.6.0+24604+449f851b
nodejs-nodemon Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.1.14-1.module+el9.6.0+24604+449f851b
Update to 0:3.1.14-1.module+el9.6.0+24604+449f851b
nodejs-packaging Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2021.06-4.module+el9.6.0+23473+45664c2d
Update to 0:2021.06-4.module+el9.6.0+23473+45664c2d
nodejs-packaging-bundler Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2021.06-4.module+el9.6.0+23473+45664c2d
Update to 0:2021.06-4.module+el9.6.0+23473+45664c2d
npm Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:10.9.8-1.22.23.1.2.module+el9.6.0+24604+449f851b
Update to 1:10.9.8-1.22.23.1.2.module+el9.6.0+24604+449f851b
v8-12.4-devel Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 3:12.4.254.21-1.22.23.1.2.module+el9.6.0+24604+449f851b
Update to 3:12.4.254.21-1.22.23.1.2.module+el9.6.0+24604+449f851b
Original sources
- https://access.redhat.com/errata/RHSA-2026:52399
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2476810
- https://bugzilla.redhat.com/show_bug.cgi?id=2489980
- https://bugzilla.redhat.com/show_bug.cgi?id=2493331
- https://bugzilla.redhat.com/show_bug.cgi?id=2493335
- https://bugzilla.redhat.com/show_bug.cgi?id=2493337
- https://bugzilla.redhat.com/show_bug.cgi?id=2494813
- https://bugzilla.redhat.com/show_bug.cgi?id=2498116
- https://bugzilla.redhat.com/show_bug.cgi?id=2498120
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52399.json
- https://access.redhat.com/security/cve/CVE-2026-12151
- https://www.cve.org/CVERecord?id=CVE-2026-12151
- https://nvd.nist.gov/vuln/detail/CVE-2026-12151
- https://cna.openjsf.org/security-advisories.html
- https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q
- https://access.redhat.com/security/cve/CVE-2026-13149
- https://www.cve.org/CVERecord?id=CVE-2026-13149
- https://nvd.nist.gov/vuln/detail/CVE-2026-13149
- https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754
- https://www.npmjs.com/package/brace-expansion
- https://access.redhat.com/security/cve/CVE-2026-42338
- https://www.cve.org/CVERecord?id=CVE-2026-42338
- https://osv.dev/vulnerability/RHSA-2026:52399