RHSA-2026:9874
RHSA-2026:9874 · Red Hat Security Advisory: nodejs:20 security update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This page shows selected source facts. See the linked advisories for the complete description and affected versions.
Red Hat Security Advisory: nodejs:20 security update
CVSS 7.5 · High · Fix available
- Published
- Updated
Stack: system
Affected products and versions
nodejs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.2-2.module+el9.6.0+24220+c44c288d
Update to 1:20.20.2-2.module+el9.6.0+24220+c44c288d
nodejs-debuginfo Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.2-2.module+el9.6.0+24220+c44c288d
Update to 1:20.20.2-2.module+el9.6.0+24220+c44c288d
nodejs-debugsource Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.2-2.module+el9.6.0+24220+c44c288d
Update to 1:20.20.2-2.module+el9.6.0+24220+c44c288d
nodejs-devel Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.2-2.module+el9.6.0+24220+c44c288d
Update to 1:20.20.2-2.module+el9.6.0+24220+c44c288d
nodejs-docs Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.2-2.module+el9.6.0+24220+c44c288d
Update to 1:20.20.2-2.module+el9.6.0+24220+c44c288d
nodejs-full-i18n Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:20.20.2-2.module+el9.6.0+24220+c44c288d
Update to 1:20.20.2-2.module+el9.6.0+24220+c44c288d
nodejs-nodemon Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:3.0.1-1.module+el9.6.0+23146+be9976bd
Update to 0:3.0.1-1.module+el9.6.0+23146+be9976bd
nodejs-packaging Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2021.06-4.module+el9.6.0+23146+be9976bd
Update to 0:2021.06-4.module+el9.6.0+23146+be9976bd
nodejs-packaging-bundler Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 0:2021.06-4.module+el9.6.0+23146+be9976bd
Update to 0:2021.06-4.module+el9.6.0+23146+be9976bd
npm Red Hat:rhel_eus:9.6::appstream
- Affected ranges
- ECOSYSTEM: < 1:10.8.2-1.20.20.2.2.module+el9.6.0+24220+c44c288d
Update to 1:10.8.2-1.20.20.2.2.module+el9.6.0+24220+c44c288d
Original sources
- https://access.redhat.com/errata/RHSA-2026:9874
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2441268
- https://bugzilla.redhat.com/show_bug.cgi?id=2442922
- https://bugzilla.redhat.com/show_bug.cgi?id=2448754
- https://bugzilla.redhat.com/show_bug.cgi?id=2453151
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9874.json
- https://access.redhat.com/security/cve/CVE-2026-21710
- https://www.cve.org/CVERecord?id=CVE-2026-21710
- https://nvd.nist.gov/vuln/detail/CVE-2026-21710
- https://nodejs.org/en/blog/vulnerability/march-2026-security-releases
- https://access.redhat.com/security/cve/CVE-2026-26996
- https://www.cve.org/CVERecord?id=CVE-2026-26996
- https://nvd.nist.gov/vuln/detail/CVE-2026-26996
- https://github.com/isaacs/minimatch/commit/2e111f3a79abc00fa73110195de2c0f2351904f5
- https://github.com/isaacs/minimatch/security/advisories/GHSA-3ppc-4f35-3m26
- https://access.redhat.com/security/cve/CVE-2026-27135
- https://www.cve.org/CVERecord?id=CVE-2026-27135
- https://nvd.nist.gov/vuln/detail/CVE-2026-27135
- https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1
- https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6
- https://access.redhat.com/security/cve/CVE-2026-27904
- https://www.cve.org/CVERecord?id=CVE-2026-27904
- https://osv.dev/vulnerability/RHSA-2026:9874