{
  "cveId": "CVE-2025-23085",
  "url": "https://patchblox.com/security/cve/CVE-2025-23085",
  "summary": "CVE-2025-23085 is fixed in 30 products on 2 platforms, first by Node.js 18 18.20.6, released January 21, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Node.js 18 and 3 others: Missing Release of Memory after Effective Lifetime",
  "description": "A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions.\r\n\r\nThis vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.",
  "published": "2025-01-24T19:33:36Z",
  "severity": "Important",
  "cvss": 7.7,
  "cvssVector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
  "cwe": "CWE-401: Missing Release of Memory after Effective Lifetime",
  "epss": 0.01377,
  "epssPercentile": 0.72219,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2025-23085",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Node.js 18",
      "fixedVersion": "18.20.6",
      "fix": "Node.js 18 18.20.6",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.18-18.20.6",
      "released": "2025-01-21T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 20",
      "fixedVersion": "20.18.2",
      "fix": "Node.js 20 20.18.2",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.20-20.18.2",
      "released": "2025-01-21T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 22",
      "fixedVersion": "22.13.1",
      "fix": "Node.js 22 22.13.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.22-22.13.1",
      "released": "2025-01-21T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 23",
      "fixedVersion": "23.6.1",
      "fix": "Node.js 23 23.6.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.23-23.6.1",
      "released": "2025-01-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "12.22.12~dfsg-1~deb11u6",
      "fix": "DLA-4067-1",
      "url": "https://patchblox.com/security/fix/linux/dla-4067-1",
      "released": "2025-02-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "18.20.4\u002Bdfsg-1~deb12u2",
      "fix": "DEBIAN-CVE-2025-23085",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-23085",
      "released": "2025-02-07T07:15:15Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "20.19.2\u002Bdfsg-1\u002Bdeb13u1",
      "fix": "DSA-6166-1",
      "url": "https://patchblox.com/security/fix/linux/dsa-6166-1",
      "released": "2026-03-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 14",
      "fixedVersion": "20.18.2\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2025-23085",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-23085",
      "released": "2025-02-07T07:15:15Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.13.1-1.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.13.1-1.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.13.1-1.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.13.1-1.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.20.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:20.18.2-1.module\u002Bel8.10.0\u002B90510\u002B29816cee",
      "fix": "ELSA-2025-1351",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1351",
      "released": "2025-02-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:20.18.2-1.module\u002Bel9.5.0\u002B90512\u002B230358da",
      "fix": "ELSA-2025-1443",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1443",
      "released": "2025-02-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 8",
      "fixedVersion": "1:22.13.1-1.module\u002Bel8.10.0\u002B1935\u002Bd3cbe60f",
      "fix": "RLSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-1611",
      "released": "2025-02-26T19:09:52Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:18.20.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:18.20.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:22.13.1-1.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:22.13.1-1.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:22.13.1-1.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:22.13.1-1.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:18.20.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:20.18.2-1.module\u002Bel8.10.0\u002B90510\u002B29816cee",
      "fix": "ELSA-2025-1351",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1351",
      "released": "2025-02-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:20.18.2-1.module\u002Bel9.5.0\u002B90512\u002B230358da",
      "fix": "ELSA-2025-1443",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1443",
      "released": "2025-02-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.13.1-1.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.13.1-1.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.13.1-1.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.13.1-1.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.20.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:20.18.2-1.module\u002Bel8.10.0\u002B90510\u002B29816cee",
      "fix": "ELSA-2025-1351",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1351",
      "released": "2025-02-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:20.18.2-1.module\u002Bel9.5.0\u002B90512\u002B230358da",
      "fix": "ELSA-2025-1443",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1443",
      "released": "2025-02-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:22.13.1-1.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:22.13.1-1.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:22.13.1-1.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:22.13.1-1.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:18.20.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:20.18.2-1.module\u002Bel8.10.0\u002B90510\u002B29816cee",
      "fix": "ELSA-2025-1351",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1351",
      "released": "2025-02-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:20.18.2-1.module\u002Bel9.5.0\u002B90512\u002B230358da",
      "fix": "ELSA-2025-1443",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1443",
      "released": "2025-02-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.13.1-1.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.13.1-1.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.13.1-1.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.13.1-1.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:18.20.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 8",
      "fixedVersion": "1:22.13.1-1.module\u002Bel8.10.0\u002B90518\u002Bcdafa262",
      "fix": "ELSA-2025-1611",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1611",
      "released": "2025-02-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:22.13.1-1.module\u002Bel9.5.0\u002B90517\u002B729550a4",
      "fix": "ELSA-2025-1613",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1613",
      "released": "2025-02-19T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:18.20.6-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "3.0.1-1.module_el8.8.0\u002B3613\u002B1ed8c91d",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "3.0.1-1.module_el9.5.0\u002B136\u002B92f38f3c",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B90510\u002B29816cee",
      "fix": "ELSA-2025-1351",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1351",
      "released": "2025-02-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.3.0\u002B90066\u002B12d4a8d7",
      "fix": "ELSA-2025-1443",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1443",
      "released": "2025-02-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B1666\u002B930e28e8",
      "fix": "RLSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-1611",
      "released": "2025-02-26T19:09:52Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.6.0\u002B32322\u002Ba8b1fd01",
      "fix": "RLSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-1613",
      "released": "2025-02-26T19:11:14Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "amzn 2023",
      "fixedVersion": "1:10.8.2-1.18.20.6.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-4.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.5.0\u002B136\u002B92f38f3c",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B90510\u002B29816cee",
      "fix": "ELSA-2025-1351",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1351",
      "released": "2025-02-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.3.0\u002B90066\u002B12d4a8d7",
      "fix": "ELSA-2025-1443",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1443",
      "released": "2025-02-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B1667\u002B4a788d89",
      "fix": "RLSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-1611",
      "released": "2025-02-26T19:09:52Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.5.0\u002B31770\u002B0da7192d",
      "fix": "RLSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-1613",
      "released": "2025-02-26T19:11:14Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-4.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B90510\u002B29816cee",
      "fix": "ELSA-2025-1351",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1351",
      "released": "2025-02-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.3.0\u002B90066\u002B12d4a8d7",
      "fix": "ELSA-2025-1443",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1443",
      "released": "2025-02-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "amzn 2023",
      "fixedVersion": "1:20.18.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "20.18.2-150600.3.9.1",
      "fix": "SUSE-SU-2025:0237-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0237-1",
      "released": "2025-01-24T19:33:36Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "sles 15.6",
      "fixedVersion": "20.18.2-150600.3.9.1",
      "fix": "SUSE-SU-2025:0237-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0237-1",
      "released": "2025-01-24T19:33:36Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:20.18.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:20.18.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:20.18.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:20.18.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:20.18.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:20.18.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:20.18.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-npm",
      "release": "amzn 2023",
      "fixedVersion": "1:10.8.2-1.20.18.2.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "22.13.1-150600.13.6.1",
      "fix": "SUSE-SU-2025:0284-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0284-1",
      "released": "2025-01-29T13:47:55Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 15.6",
      "fixedVersion": "22.13.1-150600.13.6.1",
      "fix": "SUSE-SU-2025:0284-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-0284-1",
      "released": "2025-01-29T13:47:55Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:10.9.2-1.22.13.1.1.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:10.9.2-1.22.13.1.1.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:10.9.2-1.22.13.1.1.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:10.9.2-1.22.13.1.1.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:10.8.2-1.20.18.2.1.module\u002Bel8.10.0\u002B90510\u002B29816cee",
      "fix": "ELSA-2025-1351",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1351",
      "released": "2025-02-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:10.8.2-1.20.18.2.1.module\u002Bel9.5.0\u002B90512\u002B230358da",
      "fix": "ELSA-2025-1443",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1443",
      "released": "2025-02-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-10.2-devel",
      "release": "amzn 2023",
      "fixedVersion": "3:10.2.154.26-1.18.20.6.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-843",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-843",
      "released": "2025-02-12T22:57:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-11.3-devel",
      "release": "amzn 2023",
      "fixedVersion": "3:11.3.244.8-1.20.18.2.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-822",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-822",
      "released": "2025-01-30T03:53:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:12.4.254.21-1.22.13.1.1.module\u002Bel8.10.0\u002B22759\u002B46b58560",
      "fix": "RHSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:12.4.254.21-1.22.13.1.1.module\u002Bel9.5.0\u002B22763\u002B17233acb",
      "fix": "RHSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:12.4.254.21-1.22.13.1.1.module_el8.10.0\u002B3961\u002B6a788e57",
      "fix": "ALSA-2025:1611",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1611",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:12.4.254.21-1.22.13.1.1.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:1613",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-1613",
      "released": "2025-02-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 8",
      "fixedVersion": "3:12.4.254.21-1.22.13.1.1.module\u002Bel8.10.0\u002B90518\u002Bcdafa262",
      "fix": "ELSA-2025-1611",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1611",
      "released": "2025-02-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 9",
      "fixedVersion": "3:12.4.254.21-1.22.13.1.1.module\u002Bel9.5.0\u002B90517\u002B729550a4",
      "fix": "ELSA-2025-1613",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-1613",
      "released": "2025-02-19T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}