{
  "cveId": "CVE-2025-23166",
  "url": "https://patchblox.com/security/cve/CVE-2025-23166",
  "summary": "CVE-2025-23166 is fixed in 33 products on 2 platforms, first by Node.js 24.0.2, released May 14, 2025. 1 other affected product has no fix yet. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Node.js 20 and 3 others: Uncaught Exception",
  "description": "The C\u002B\u002B method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.",
  "published": "2025-05-19T01:25:08Z",
  "severity": "Important",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cwe": "CWE-248: Uncaught Exception",
  "epss": 0.00817,
  "epssPercentile": 0.57361,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2025-23166",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Node.js",
      "fixedVersion": "24.0.2",
      "fix": "Node.js 24.0.2",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs-24.0.2",
      "released": "2025-05-14T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 20",
      "fixedVersion": "20.19.2",
      "fix": "Node.js 20 20.19.2",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.20-20.19.2",
      "released": "2025-05-14T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 22",
      "fixedVersion": "22.15.1",
      "fix": "Node.js 22 22.15.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.22-22.15.1",
      "released": "2025-05-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "18.20.4\u002Bdfsg-1~deb12u2",
      "fix": "DEBIAN-CVE-2025-23166",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-23166",
      "released": "2025-05-19T02:15:17Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "20.19.2\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2025-23166",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-23166",
      "released": "2025-05-19T02:15:17Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 14",
      "fixedVersion": "20.19.2\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2025-23166",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-23166",
      "released": "2025-05-19T02:15:17Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:20.19.2-1.module\u002Bel8.10.0\u002B23139\u002B21ba74c5",
      "fix": "RHSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:20.19.2-1.module\u002Bel9.6.0\u002B23146\u002Bbe9976bd",
      "fix": "RHSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:20.19.2-1.module_el8.10.0\u002B4007\u002B01f7d99b",
      "fix": "ALSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:20.19.2-1.module_el9.6.0\u002B169\u002Bc9cb05c2",
      "fix": "ALSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-8493",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8493",
      "released": "2025-06-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:22.16.0-1.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:22.16.0-1.module\u002Bel9.6.0\u002B90604\u002B9071ea19",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 8",
      "fixedVersion": "1:20.19.2-1.module\u002Bel8.10.0\u002B1988\u002B437f3d23",
      "fix": "RLSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8514",
      "released": "2025-07-29T13:38:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 9",
      "fixedVersion": "1:20.19.2-1.module\u002Bel9.6.0\u002B32143\u002Bae966e5b",
      "fix": "RLSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8468",
      "released": "2025-07-29T13:40:19Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:20.19.2-1.module\u002Bel8.10.0\u002B23139\u002B21ba74c5",
      "fix": "RHSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:20.19.2-1.module\u002Bel9.6.0\u002B23146\u002Bbe9976bd",
      "fix": "RHSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:20.19.2-1.module_el8.10.0\u002B4007\u002B01f7d99b",
      "fix": "ALSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:20.19.2-1.module_el9.6.0\u002B169\u002Bc9cb05c2",
      "fix": "ALSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-8493",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8493",
      "released": "2025-06-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:22.16.0-1.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:22.16.0-1.module\u002Bel9.6.0\u002B90604\u002B9071ea19",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:20.19.2-1.module\u002Bel8.10.0\u002B23139\u002B21ba74c5",
      "fix": "RHSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:20.19.2-1.module\u002Bel9.6.0\u002B23146\u002Bbe9976bd",
      "fix": "RHSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ALSA-2025:8493",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8493",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:20.19.2-1.module_el8.10.0\u002B4007\u002B01f7d99b",
      "fix": "ALSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:20.19.2-1.module_el9.6.0\u002B169\u002Bc9cb05c2",
      "fix": "ALSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-8493",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8493",
      "released": "2025-06-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:22.16.0-1.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:22.16.0-1.module\u002Bel9.6.0\u002B90604\u002B9071ea19",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:20.19.2-1.module\u002Bel8.10.0\u002B23139\u002B21ba74c5",
      "fix": "RHSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:20.19.2-1.module\u002Bel9.6.0\u002B23146\u002Bbe9976bd",
      "fix": "RHSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:20.19.2-1.module_el8.10.0\u002B4007\u002B01f7d99b",
      "fix": "ALSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:20.19.2-1.module_el9.6.0\u002B169\u002Bc9cb05c2",
      "fix": "ALSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-8493",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8493",
      "released": "2025-06-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:22.16.0-1.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:22.16.0-1.module\u002Bel9.6.0\u002B90604\u002B9071ea19",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.16.0-1.module\u002Bel8.10.0\u002B23140\u002B4056b950",
      "fix": "RHSA-2025:8506",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.16.0-1.module\u002Bel9.6.0\u002B23151\u002Bb1496e9d",
      "fix": "RHSA-2025:8467",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8467",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.16.0-1.module_el8.10.0\u002B4006\u002B3c416519",
      "fix": "ALSA-2025:8506",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.16.0-1.module_el9.6.0\u002B170\u002Bf035de78",
      "fix": "ALSA-2025:8467",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8467",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-8493",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8493",
      "released": "2025-06-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 8",
      "fixedVersion": "1:22.16.0-1.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:22.16.0-1.module\u002Bel9.6.0\u002B90604\u002B9071ea19",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B23139\u002B21ba74c5",
      "fix": "RHSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.6.0\u002B23146\u002Bbe9976bd",
      "fix": "RHSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "3.0.1-1.module_el8.10.0\u002B3982\u002B85c136aa",
      "fix": "ALSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "3.0.1-1.module_el9.5.0\u002B125\u002B8dc38870",
      "fix": "ALSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.6.0\u002B90588\u002B1a9ecb62",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B1988\u002B437f3d23",
      "fix": "RLSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8514",
      "released": "2025-07-29T13:38:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.5.0\u002B31770\u002B0da7192d",
      "fix": "RLSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8468",
      "released": "2025-07-29T13:40:19Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "ol 10",
      "fixedVersion": "1:10.9.2-1.22.16.0.1.el10_0",
      "fix": "ELSA-2025-8493",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8493",
      "released": "2025-06-27T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B23139\u002B21ba74c5",
      "fix": "RHSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.6.0\u002B23146\u002Bbe9976bd",
      "fix": "RHSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-4.module_el8.10.0\u002B3987\u002Bdbda4426",
      "fix": "ALSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.6.0\u002B162\u002B8dc602e5",
      "fix": "ALSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.6.0\u002B90588\u002B1a9ecb62",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B1667\u002B4a788d89",
      "fix": "RLSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8514",
      "released": "2025-07-29T13:38:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.5.0\u002B31770\u002B0da7192d",
      "fix": "RLSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8468",
      "released": "2025-07-29T13:40:19Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B23139\u002B21ba74c5",
      "fix": "RHSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.6.0\u002B23146\u002Bbe9976bd",
      "fix": "RHSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-4.module_el8.10.0\u002B3958\u002B472a6467",
      "fix": "ALSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.6.0\u002B162\u002B8dc602e5",
      "fix": "ALSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.6.0\u002B90588\u002B1a9ecb62",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "20.19.2-150600.3.12.1",
      "fix": "SUSE-SU-2025:02045-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02045-1",
      "released": "2025-06-20T11:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "sles 15.6",
      "fixedVersion": "20.19.2-150600.3.12.1",
      "fix": "SUSE-SU-2025:02045-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02045-1",
      "released": "2025-06-20T11:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.2-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-npm",
      "release": "amzn 2023",
      "fixedVersion": "1:10.8.2-1.20.19.2.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "RHEL 10",
      "fixedVersion": "22.16.0-1.el10_0",
      "fix": "RHSA-2025:8493",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8493",
      "released": "2025-05-19T01:25:08Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "amzn 2023",
      "fixedVersion": "1:22.16.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "22.15.1-150600.13.9.1",
      "fix": "SUSE-SU-2025:01878-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01878-1",
      "released": "2025-06-11T05:41:14Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "rocky 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "RLSA-2025:8493",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-8493",
      "released": "2025-10-03T19:56:45Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 15.6",
      "fixedVersion": "22.15.1-150600.13.9.1",
      "fix": "SUSE-SU-2025:01878-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01878-1",
      "released": "2025-06-11T05:41:14Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 15.7",
      "fixedVersion": "22.15.1-150700.3.3.1",
      "fix": "SUSE-SU-2025:01879-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2025-01879-1",
      "released": "2025-06-11T05:41:29Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:22.16.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:22.16.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:22.16.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:22.16.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:22.16.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:22.16.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:22.16.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-npm",
      "release": "amzn 2023",
      "fixedVersion": "1:10.9.2-1.22.16.0.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:10.8.2-1.20.19.2.1.module\u002Bel8.10.0\u002B23139\u002B21ba74c5",
      "fix": "RHSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:10.8.2-1.20.19.2.1.module\u002Bel9.6.0\u002B23146\u002Bbe9976bd",
      "fix": "RHSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:10.8.2-1.20.19.2.1.module_el8.10.0\u002B4007\u002B01f7d99b",
      "fix": "ALSA-2025:8514",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8514",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:10.8.2-1.20.19.2.1.module_el9.6.0\u002B169\u002Bc9cb05c2",
      "fix": "ALSA-2025:8468",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8468",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:10.9.2-1.22.16.0.1.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:10.9.2-1.22.16.0.1.module\u002Bel9.6.0\u002B90604\u002B9071ea19",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-11.3-devel",
      "release": "amzn 2023",
      "fixedVersion": "3:11.3.244.8-1.20.19.2.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1010",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1010",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:12.4.254.21-1.22.16.0.1.module\u002Bel8.10.0\u002B23140\u002B4056b950",
      "fix": "RHSA-2025:8506",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:12.4.254.21-1.22.16.0.1.module\u002Bel9.6.0\u002B23151\u002Bb1496e9d",
      "fix": "RHSA-2025:8467",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-8467",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:12.4.254.21-1.22.16.0.1.module_el8.10.0\u002B4006\u002B3c416519",
      "fix": "ALSA-2025:8506",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:12.4.254.21-1.22.16.0.1.module_el9.6.0\u002B170\u002Bf035de78",
      "fix": "ALSA-2025:8467",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-8467",
      "released": "2025-06-03T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "amzn 2023",
      "fixedVersion": "3:12.4.254.21-1.22.16.0.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-1009",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-1009",
      "released": "2025-06-04T19:08:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 8",
      "fixedVersion": "3:12.4.254.21-1.22.16.0.1.module\u002Bel8.10.0\u002B90605\u002B76e4d41a",
      "fix": "ELSA-2025-8506",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8506",
      "released": "2025-06-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 9",
      "fixedVersion": "3:12.4.254.21-1.22.16.0.1.module\u002Bel9.6.0\u002B90604\u002B9071ea19",
      "fix": "ELSA-2025-8467",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-8467",
      "released": "2025-06-04T00:00:00Z"
    }
  ],
  "noFixYet": [
    {
      "platform": "Windows apps",
      "product": "Node.js 23",
      "status": "no-fix",
      "affectedVersion": "23.11.0"
    }
  ],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}