RHSA-2026:64817
RHSA-2026:64817 · Red Hat Security Advisory: nodejs22 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Red Hat Security Advisory: nodejs22 security update
CVSS 8.6 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nodejs Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs-devel Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs-docs Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs-full-i18n Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs-libs Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs-libs-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs-npm Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:10.9.8-1.22.23.2.1.el10_0
Update to 1:10.9.8-1.22.23.2.1.el10_0
nodejs22 Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs22-debuginfo Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
nodejs22-debugsource Red Hat:enterprise_linux_eus:10.0
- Affected ranges
- ECOSYSTEM: < 1:22.23.2-1.el10_0
Update to 1:22.23.2-1.el10_0
Original sources
- https://access.redhat.com/errata/RHSA-2026:64817
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2506433
- https://bugzilla.redhat.com/show_bug.cgi?id=2509171
- https://bugzilla.redhat.com/show_bug.cgi?id=2510722
- https://bugzilla.redhat.com/show_bug.cgi?id=2510801
- https://bugzilla.redhat.com/show_bug.cgi?id=2510856
- https://bugzilla.redhat.com/show_bug.cgi?id=2511089
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_64817.json
- https://access.redhat.com/security/cve/CVE-2026-14257
- https://www.cve.org/CVERecord?id=CVE-2026-14257
- https://nvd.nist.gov/vuln/detail/CVE-2026-14257
- https://github.com/juliangruber/brace-expansion
- https://github.com/juliangruber/brace-expansion/commit/a1bd33999ea75262c4749fff3bbb0d1372bd07b5
- https://www.npmjs.com/package/brace-expansion
- https://access.redhat.com/security/cve/CVE-2026-56846
- https://www.cve.org/CVERecord?id=CVE-2026-56846
- https://nvd.nist.gov/vuln/detail/CVE-2026-56846
- https://nodejs.org/en/blog/vulnerability/july-2026-security-releases
- https://access.redhat.com/security/cve/CVE-2026-56847
- https://bugzilla.redhat.com/show_bug.cgi?id=2509178
- https://www.cve.org/CVERecord?id=CVE-2026-56847
- https://nvd.nist.gov/vuln/detail/CVE-2026-56847
- https://access.redhat.com/security/cve/CVE-2026-56848
- https://www.cve.org/CVERecord?id=CVE-2026-56848
- https://nvd.nist.gov/vuln/detail/CVE-2026-56848
- https://access.redhat.com/security/cve/CVE-2026-56850
- https://bugzilla.redhat.com/show_bug.cgi?id=2509179
- https://www.cve.org/CVERecord?id=CVE-2026-56850
- https://nvd.nist.gov/vuln/detail/CVE-2026-56850
- https://access.redhat.com/security/cve/CVE-2026-58039
- https://bugzilla.redhat.com/show_bug.cgi?id=2509653
- https://www.cve.org/CVERecord?id=CVE-2026-58039
- https://nvd.nist.gov/vuln/detail/CVE-2026-58039
- https://nodejs.org/en/blog/vulnerability
- https://access.redhat.com/security/cve/CVE-2026-58040
- https://bugzilla.redhat.com/show_bug.cgi?id=2509175
- https://www.cve.org/CVERecord?id=CVE-2026-58040
- https://nvd.nist.gov/vuln/detail/CVE-2026-58040
- https://access.redhat.com/security/cve/CVE-2026-58042
- https://bugzilla.redhat.com/show_bug.cgi?id=2510854
- https://www.cve.org/CVERecord?id=CVE-2026-58042
- https://nvd.nist.gov/vuln/detail/CVE-2026-58042
- https://access.redhat.com/security/cve/CVE-2026-58043
- https://www.cve.org/CVERecord?id=CVE-2026-58043
- https://nvd.nist.gov/vuln/detail/CVE-2026-58043
- https://access.redhat.com/security/cve/CVE-2026-58044
- https://bugzilla.redhat.com/show_bug.cgi?id=2510853
- https://www.cve.org/CVERecord?id=CVE-2026-58044
- https://nvd.nist.gov/vuln/detail/CVE-2026-58044
- https://access.redhat.com/security/cve/CVE-2026-58045
- https://bugzilla.redhat.com/show_bug.cgi?id=2510857
- https://www.cve.org/CVERecord?id=CVE-2026-58045
- https://nvd.nist.gov/vuln/detail/CVE-2026-58045
- https://access.redhat.com/security/cve/CVE-2026-69152
- https://www.cve.org/CVERecord?id=CVE-2026-69152
- https://nvd.nist.gov/vuln/detail/CVE-2026-69152
- https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d
- https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac
- https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf
- https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031
- https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895
- https://access.redhat.com/security/cve/CVE-2026-69192
- https://www.cve.org/CVERecord?id=CVE-2026-69192
- https://nvd.nist.gov/vuln/detail/CVE-2026-69192
- https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e
- https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1
- https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr
- https://osv.dev/vulnerability/RHSA-2026:64817