{
  "cveId": "CVE-2026-14257",
  "url": "https://patchblox.com/security/cve/CVE-2026-14257",
  "summary": "CVE-2026-14257 is fixed in 23 products on 1 platform, first by ALSA-2026:54371, released August 12, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "nodejs22: brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion",
  "description": "brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the length of each result string. By chaining multiple brace groups, an attacker keeps the result count under the limit while making each result progressively longer, so total memory scales with both count and string length until the process hits a fatal, uncatchable out-of-memory error. About 7.5 KB of input (\u0027{a,b}\u0027.repeat(1500)) crashes a default Node.js process. Any application that passes attacker-influenced strings to brace-expansion.expand() - directly or transitively via minimatch / glob brace patterns - can be crashed by a small request. Fixed in 5.0.8 by adding a maxLength option (default 4,000,000) that bounds accumulated output and intermediate arrays.",
  "published": "2026-07-23T12:54:23Z",
  "severity": "important",
  "cvss": 8.6,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
  "epss": 0.00643,
  "epssPercentile": 0.51103,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-3.module\u002Bel8.10.0\u002B24640\u002B6eba5e6e",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.18.0-6.module\u002Bel9.8.0\u002B24638\u002B75f46aee",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-6.el10_2",
      "fix": "ALSA-2026:55541",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-3.module_el8.10.0\u002B4251\u002Bb427b8a5",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.18.0-6.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-6.0.1.el10_2",
      "fix": "ELSA-2026-55541",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-3.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-3.module\u002Bel9.8.0\u002B90991\u002B73acc950",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 8",
      "fixedVersion": "1:22.23.1-3.module\u002Bel8.10.0\u002B40278\u002B50b003a3",
      "fix": "RLSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-54530",
      "released": "2026-08-25T18:03:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 9",
      "fixedVersion": "1:24.18.0-6.module\u002Bel9.8.0\u002B40281\u002B14cc6568",
      "fix": "RLSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-55603",
      "released": "2026-08-25T18:04:05Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-3.module\u002Bel8.10.0\u002B24640\u002B6eba5e6e",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:24.18.0-6.module\u002Bel9.8.0\u002B24638\u002B75f46aee",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-6.el10_2",
      "fix": "ALSA-2026:55541",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-3.module_el8.10.0\u002B4251\u002Bb427b8a5",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:24.18.0-6.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-6.0.1.el10_2",
      "fix": "ELSA-2026-55541",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-3.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-3.module\u002Bel9.8.0\u002B90991\u002B73acc950",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-3.module\u002Bel8.10.0\u002B24640\u002B6eba5e6e",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.18.0-6.module\u002Bel9.8.0\u002B24638\u002B75f46aee",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-6.el10_2",
      "fix": "ALSA-2026:55541",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-3.module_el8.10.0\u002B4251\u002Bb427b8a5",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.18.0-6.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-6.0.1.el10_2",
      "fix": "ELSA-2026-55541",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-3.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-3.module\u002Bel9.8.0\u002B90991\u002B73acc950",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-3.module\u002Bel8.10.0\u002B24640\u002B6eba5e6e",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:24.18.0-6.module\u002Bel9.8.0\u002B24638\u002B75f46aee",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-6.el10_2",
      "fix": "ALSA-2026:55541",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-3.module_el8.10.0\u002B4251\u002Bb427b8a5",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:24.18.0-6.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-6.0.1.el10_2",
      "fix": "ELSA-2026-55541",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-3.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-3.module\u002Bel9.8.0\u002B90991\u002B73acc950",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-3.module\u002Bel8.10.0\u002B24640\u002B6eba5e6e",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.18.0-6.module\u002Bel9.8.0\u002B24638\u002B75f46aee",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-6.el10_2",
      "fix": "ALSA-2026:55541",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-3.module_el8.10.0\u002B4251\u002Bb427b8a5",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.18.0-6.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-6.0.1.el10_2",
      "fix": "ELSA-2026-55541",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-3.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-3.module\u002Bel9.8.0\u002B90991\u002B73acc950",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:3.1.14-2.module\u002Bel8.10.0\u002B24640\u002B6eba5e6e",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:3.1.14-3.module\u002Bel9.8.0\u002B24638\u002B75f46aee",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "3.1.14-2.module_el8.10.0\u002B4252\u002Baedd4c30",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "3.1.14-3.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:3.1.14-2.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:3.1.14-2.module\u002Bel9.8.0\u002B90991\u002B73acc950",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:3.1.14-2.module\u002Bel8.10.0\u002B40277\u002Bb1b3f89e",
      "fix": "RLSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-54530",
      "released": "2026-08-25T18:03:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 9",
      "fixedVersion": "0:3.1.14-3.module\u002Bel9.8.0\u002B40281\u002B14cc6568",
      "fix": "RLSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-55603",
      "released": "2026-08-25T18:04:05Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:10.9.8-1.22.23.1.6.el10_2",
      "fix": "ALSA-2026:55541",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "ol 10",
      "fixedVersion": "1:10.9.8-1.22.23.1.6.0.1.el10_2",
      "fix": "ELSA-2026-55541",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55541",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B24355\u002B35d95b59",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4158\u002Be796f37f",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B209\u002Becf6523e",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B90973\u002Be42b55e7",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B40172\u002B38f6fdd1",
      "fix": "RLSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-54530",
      "released": "2026-08-25T18:03:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B40165\u002Bd075e3f2",
      "fix": "RLSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-55603",
      "released": "2026-08-25T18:04:05Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B24355\u002B35d95b59",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4158\u002Be796f37f",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B209\u002Becf6523e",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B90973\u002Be42b55e7",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "RHEL 10",
      "fixedVersion": "22.23.2-1.el10_0",
      "fix": "RHSA-2026:64817",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-64817",
      "released": "2026-08-17T23:00:29Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "rocky 10",
      "fixedVersion": "1:22.23.1-6.el10_2",
      "fix": "RLSA-2026:55541",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-55541",
      "released": "2026-08-18T12:07:31Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "RHEL 10",
      "fixedVersion": "24.18.0-5.el10_2",
      "fix": "RHSA-2026:58819",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-58819",
      "released": "2026-08-25T00:10:51Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-5.el10_2",
      "fix": "ALSA-2026:58819",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-58819",
      "released": "2026-08-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "amzn 2023",
      "fixedVersion": "1:24.22.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-5.0.1.el10_2",
      "fix": "ELSA-2026-58819",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-58819",
      "released": "2026-08-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "rocky 10",
      "fixedVersion": "1:24.18.0-5.el10_2",
      "fix": "RLSA-2026:58819",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-58819",
      "released": "2026-08-25T12:07:46Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:24.22.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:24.22.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-5.el10_2",
      "fix": "ALSA-2026:58819",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-58819",
      "released": "2026-08-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:24.22.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-5.0.1.el10_2",
      "fix": "ELSA-2026-58819",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-58819",
      "released": "2026-08-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-5.el10_2",
      "fix": "ALSA-2026:58819",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-58819",
      "released": "2026-08-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:24.22.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-5.0.1.el10_2",
      "fix": "ELSA-2026-58819",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-58819",
      "released": "2026-08-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-5.el10_2",
      "fix": "ALSA-2026:58819",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-58819",
      "released": "2026-08-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:24.22.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-5.0.1.el10_2",
      "fix": "ELSA-2026-58819",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-58819",
      "released": "2026-08-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-5.el10_2",
      "fix": "ALSA-2026:58819",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-58819",
      "released": "2026-08-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:24.22.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-5.0.1.el10_2",
      "fix": "ELSA-2026-58819",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-58819",
      "released": "2026-08-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:24.22.0-1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:11.16.0-1.24.18.0.5.el10_2",
      "fix": "ALSA-2026:58819",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-58819",
      "released": "2026-08-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "amzn 2023",
      "fixedVersion": "1:11.19.1-1.24.22.0.1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "ol 10",
      "fixedVersion": "1:11.16.0-1.24.18.0.5.0.1.el10_2",
      "fix": "ELSA-2026-58819",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-58819",
      "released": "2026-08-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:10.9.8-1.22.23.1.3.module\u002Bel8.10.0\u002B24640\u002B6eba5e6e",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:11.16.0-1.24.18.0.6.module\u002Bel9.8.0\u002B24638\u002B75f46aee",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:10.9.8-1.22.23.1.3.module_el8.10.0\u002B4251\u002Bb427b8a5",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:11.16.0-1.24.18.0.6.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:11.16.0-1.24.18.0.3.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:10.9.8-1.22.23.1.3.module\u002Bel9.8.0\u002B90991\u002B73acc950",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rh-podman-desktop",
      "release": "RHEL 10",
      "fixedVersion": "1.1.2-1.el10_2",
      "fix": "RHSA-2026:57590",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-57590",
      "released": "2026-08-21T23:39:10Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.3.module\u002Bel8.10.0\u002B24640\u002B6eba5e6e",
      "fix": "RHSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54530",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.3.module\u002Bel9.8.0\u002B24637\u002Be0b636e5",
      "fix": "RHSA-2026:55601",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55601",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.3.module_el8.10.0\u002B4251\u002Bb427b8a5",
      "fix": "ALSA-2026:54530",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54530",
      "released": "2026-08-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.3.module_el9.8.0\u002B291\u002B0bb98cce",
      "fix": "ALSA-2026:55601",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55601",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 8",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.3.module\u002Bel8.10.0\u002B90989\u002B141244df",
      "fix": "ELSA-2026-54530",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54530",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 9",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.3.module\u002Bel9.8.0\u002B90991\u002B73acc950",
      "fix": "ELSA-2026-55601",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55601",
      "released": "2026-08-18T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.3.module\u002Bel8.10.0\u002B24639\u002B56878497",
      "fix": "RHSA-2026:54371",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-54371",
      "released": "2026-08-28T00:36:47Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.6.module\u002Bel9.8.0\u002B24638\u002B75f46aee",
      "fix": "RHSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-55603",
      "released": "2026-08-28T00:38:13Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.3.module_el8.10.0\u002B4250\u002B09238ed4",
      "fix": "ALSA-2026:54371",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-54371",
      "released": "2026-08-12T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.6.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:55603",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-55603",
      "released": "2026-08-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "amzn 2023",
      "fixedVersion": "3:13.6.233.17-1.24.22.0.1.amzn2023.0.1",
      "fix": "ALAS2023-2026-3297",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3297",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "ol 8",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.3.module\u002Bel8.10.0\u002B90988\u002Bddbb43dc",
      "fix": "ELSA-2026-54371",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-54371",
      "released": "2026-08-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "ol 9",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.6.module\u002Bel9.8.0\u002B90993\u002B075b4fd6",
      "fix": "ELSA-2026-55603",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-55603",
      "released": "2026-08-18T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-10T01:44:33Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}