{
  "cveId": "CVE-2025-31498",
  "url": "https://patchblox.com/security/cve/CVE-2025-31498",
  "summary": "CVE-2025-31498 is fixed in 25 products on 1 platform, first by RHSA-2025:7502, released April 8, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "libcares2: c-ares is an asynchronous resolver library",
  "description": "c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4,there is a use-after-free in read_answers() when process_answer() mayre-enqueue a query either due to a DNS Cookie Failure or when the upstreamserver does not properly support EDNS, or possibly on TCP queries if theremote closed the connection immediately after a response. If there was anissue trying to put that new transaction on the wire, it would close theconnection handle, but read_answers() was still expecting the connectionhandle to be available to possibly dequeue other responses. In theory aremote attacker might be able to trigger this by flooding the target withICMP UNREACHABLE packets if they also control the upstream nameserver andcan return a result with one of those conditions, this has been untested.Otherwise only a local attacker might be able to change system behavior tomake send()/write() return a failure condition. This vulnerability is fixedin 1.34.5.",
  "published": "2025-04-08T13:53:11Z",
  "severity": "Medium",
  "cvss": 7.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
  "epss": 0.00602,
  "epssPercentile": 0.49028,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "c-ares",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1.34.5-1",
      "fix": "DEBIAN-CVE-2025-31498",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-31498",
      "released": "2025-04-08T14:15:35Z"
    },
    {
      "platform": "linux",
      "product": "c-ares",
      "release": "Debian 14",
      "fixedVersion": "1.34.5-1",
      "fix": "DEBIAN-CVE-2025-31498",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-31498",
      "released": "2025-04-08T14:15:35Z"
    },
    {
      "platform": "linux",
      "product": "c-ares",
      "release": "sles 15.6",
      "fixedVersion": "1.34.8-150000.3.29.1",
      "fix": "SUSE-SU-2026:4021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4021-1",
      "released": "2026-09-07T07:42:20Z"
    },
    {
      "platform": "linux",
      "product": "c-ares",
      "release": "sles 15.7",
      "fixedVersion": "1.34.8-150000.3.29.1",
      "fix": "SUSE-SU-2026:4021-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4021-1",
      "released": "2026-09-07T07:42:20Z"
    },
    {
      "platform": "linux",
      "product": "libc-ares2",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1.34.4-2.1ubuntu0.1",
      "fix": "libc-ares2 1.34.4-2.1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libc-ares2-1.34.4-2.1ubuntu0.1",
      "released": "2026-01-16T01:42:25Z"
    },
    {
      "platform": "linux",
      "product": "libcares2",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "1.33.0-1ubuntu0.1",
      "fix": "libcares2 1.33.0-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libcares2-1.33.0-1ubuntu0.1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "libcares2",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1.34.4-2.1ubuntu0.1",
      "fix": "libcares2 1.34.4-2.1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libcares2-1.34.4-2.1ubuntu0.1",
      "released": "2026-01-16T01:42:25Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B23054\u002B5431297f",
      "fix": "RHSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.15.0-1.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.15.0-1.el10_0",
      "fix": "ALSA-2025:7502",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7502",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:20.19.1-1.module_el8.10.0\u002B3987\u002Bdbda4426",
      "fix": "ALSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.15.0-1.module_el9.6.0\u002B164\u002B2d89b8ed",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-7502",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7502",
      "released": "2025-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B90560\u002B49d7a1eb",
      "fix": "ELSA-2025-4461",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:20.19.1-1.module\u002Bel9.6.0\u002B90590\u002Bfd42b52a",
      "fix": "ELSA-2025-7426",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7426",
      "released": "2025-05-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B1972\u002B57cf735f",
      "fix": "RLSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-4461",
      "released": "2025-07-29T13:38:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B23054\u002B5431297f",
      "fix": "RHSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:22.15.0-1.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 10",
      "fixedVersion": "1:22.15.0-1.el10_0",
      "fix": "ALSA-2025:7502",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7502",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:20.19.1-1.module_el8.10.0\u002B3987\u002Bdbda4426",
      "fix": "ALSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:22.15.0-1.module_el9.6.0\u002B164\u002B2d89b8ed",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-7502",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7502",
      "released": "2025-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B90560\u002B49d7a1eb",
      "fix": "ELSA-2025-4461",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:20.19.1-1.module\u002Bel9.6.0\u002B90590\u002Bfd42b52a",
      "fix": "ELSA-2025-7426",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7426",
      "released": "2025-05-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B23054\u002B5431297f",
      "fix": "RHSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.15.0-1.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.15.0-1.el10_0",
      "fix": "ALSA-2025:7502",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7502",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:20.19.1-1.module_el8.10.0\u002B3987\u002Bdbda4426",
      "fix": "ALSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.15.0-1.module_el9.6.0\u002B164\u002B2d89b8ed",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-7502",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7502",
      "released": "2025-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B90560\u002B49d7a1eb",
      "fix": "ELSA-2025-4461",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:20.19.1-1.module\u002Bel9.6.0\u002B90590\u002Bfd42b52a",
      "fix": "ELSA-2025-7426",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7426",
      "released": "2025-05-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B23054\u002B5431297f",
      "fix": "RHSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:22.15.0-1.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 10",
      "fixedVersion": "1:22.15.0-1.el10_0",
      "fix": "ALSA-2025:7502",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7502",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:20.19.1-1.module_el8.10.0\u002B3987\u002Bdbda4426",
      "fix": "ALSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:22.15.0-1.module_el9.6.0\u002B164\u002B2d89b8ed",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-7502",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7502",
      "released": "2025-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:20.19.1-1.module\u002Bel8.10.0\u002B90560\u002B49d7a1eb",
      "fix": "ELSA-2025-4461",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:20.19.1-1.module\u002Bel9.6.0\u002B90590\u002Bfd42b52a",
      "fix": "ELSA-2025-7426",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7426",
      "released": "2025-05-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.15.0-1.module\u002Bel8.10.0\u002B23068\u002B28ff2340",
      "fix": "RHSA-2025:4459",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4459",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.15.0-1.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.15.0-1.el10_0",
      "fix": "ALSA-2025:7502",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7502",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.15.0-1.module_el8.10.0\u002B3986\u002Ba908e756",
      "fix": "ALSA-2025:4459",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4459",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.15.0-1.module_el9.6.0\u002B164\u002B2d89b8ed",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 10",
      "fixedVersion": "1:22.16.0-1.el10_0",
      "fix": "ELSA-2025-7502",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7502",
      "released": "2025-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 8",
      "fixedVersion": "1:22.15.0-1.module\u002Bel8.10.0\u002B90558\u002Bf3d29a46",
      "fix": "ELSA-2025-4459",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4459",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:22.15.0-1.module\u002Bel9.6.0\u002B90588\u002B1a9ecb62",
      "fix": "ELSA-2025-7433",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7433",
      "released": "2025-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B22904\u002Bd0fedeff",
      "fix": "RHSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "3.0.1-1.module_el8.10.0\u002B3982\u002B85c136aa",
      "fix": "ALSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "3.0.1-1.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B90560\u002B49d7a1eb",
      "fix": "ELSA-2025-4461",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.3.0\u002B90066\u002B12d4a8d7",
      "fix": "ELSA-2025-7426",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7426",
      "released": "2025-05-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B1988\u002B437f3d23",
      "fix": "RLSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-4461",
      "released": "2025-07-29T13:38:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.5.0\u002B31770\u002B0da7192d",
      "fix": "RLSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-7433",
      "released": "2025-07-29T13:40:19Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:10.9.2-1.22.15.0.1.el10_0",
      "fix": "ALSA-2025:7502",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7502",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "ol 10",
      "fixedVersion": "1:10.9.2-1.22.16.0.1.el10_0",
      "fix": "ELSA-2025-7502",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7502",
      "released": "2025-06-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B22904\u002Bd0fedeff",
      "fix": "RHSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-4.module_el8.10.0\u002B3987\u002Bdbda4426",
      "fix": "ALSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B90560\u002B49d7a1eb",
      "fix": "ELSA-2025-4461",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.3.0\u002B90066\u002B12d4a8d7",
      "fix": "ELSA-2025-7426",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7426",
      "released": "2025-05-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B1667\u002B4a788d89",
      "fix": "RLSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-4461",
      "released": "2025-07-29T13:38:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.5.0\u002B31770\u002B0da7192d",
      "fix": "RLSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2025-7433",
      "released": "2025-07-29T13:40:19Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B22904\u002Bd0fedeff",
      "fix": "RHSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-4.module_el8.10.0\u002B3958\u002B472a6467",
      "fix": "ALSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-4.module_el9.5.0\u002B139\u002B09296491",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B90560\u002B49d7a1eb",
      "fix": "ELSA-2025-4461",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-4.module\u002Bel9.3.0\u002B90066\u002B12d4a8d7",
      "fix": "ELSA-2025-7426",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7426",
      "released": "2025-05-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:20.19.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20-npm",
      "release": "amzn 2023",
      "fixedVersion": "1:10.8.2-1.20.19.0.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "RHEL 10",
      "fixedVersion": "22.15.0-1.el10_0",
      "fix": "RHSA-2025:7502",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7502",
      "released": "2025-04-08T13:53:11Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:10.8.2-1.20.19.1.1.module\u002Bel8.10.0\u002B23054\u002B5431297f",
      "fix": "RHSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:10.9.2-1.22.15.0.1.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:10.8.2-1.20.19.1.1.module_el8.10.0\u002B3987\u002Bdbda4426",
      "fix": "ALSA-2025:4461",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:10.9.2-1.22.15.0.1.module_el9.6.0\u002B164\u002B2d89b8ed",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:10.8.2-1.20.19.1.1.module\u002Bel8.10.0\u002B90560\u002B49d7a1eb",
      "fix": "ELSA-2025-4461",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4461",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:10.8.2-1.20.19.1.1.module\u002Bel9.6.0\u002B90590\u002Bfd42b52a",
      "fix": "ELSA-2025-7426",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7426",
      "released": "2025-05-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-11.3-devel",
      "release": "amzn 2023",
      "fixedVersion": "3:11.3.244.8-1.20.19.0.1.amzn2023.0.1",
      "fix": "ALAS2023-2025-942",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2025-942",
      "released": "2025-04-23T22:04:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:12.4.254.21-1.22.15.0.1.module\u002Bel8.10.0\u002B23068\u002B28ff2340",
      "fix": "RHSA-2025:4459",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-4459",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:12.4.254.21-1.22.15.0.1.module\u002Bel9.6.0\u002B23062\u002B9e7801b9",
      "fix": "RHSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:12.4.254.21-1.22.15.0.1.module_el8.10.0\u002B3986\u002Ba908e756",
      "fix": "ALSA-2025:4459",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-4459",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:12.4.254.21-1.22.15.0.1.module_el9.6.0\u002B164\u002B2d89b8ed",
      "fix": "ALSA-2025:7433",
      "url": "https://patchblox.com/security/fix/linux/alsa-2025-7433",
      "released": "2025-05-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 8",
      "fixedVersion": "3:12.4.254.21-1.22.15.0.1.module\u002Bel8.10.0\u002B90558\u002Bf3d29a46",
      "fix": "ELSA-2025-4459",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-4459",
      "released": "2025-05-05T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 9",
      "fixedVersion": "3:12.4.254.21-1.22.15.0.1.module\u002Bel9.6.0\u002B90588\u002B1a9ecb62",
      "fix": "ELSA-2025-7433",
      "url": "https://patchblox.com/security/fix/linux/elsa-2025-7433",
      "released": "2025-05-22T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}