{
  "cveId": "CVE-2026-21711",
  "url": "https://patchblox.com/security/cve/CVE-2026-21711",
  "summary": "CVE-2026-21711 is fixed in 17 products on 2 platforms, first by RHSA-2026:7670, released March 12, 2026. 12 other affected products have no fix yet. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Node.js 14 and 12 others: Improper Access Control",
  "description": "A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission checks, while all comparable network paths correctly enforce them.\r\n\r\nAs a result, code running under \u0060--permission\u0060 without \u0060--allow-net\u0060 can create and expose local IPC endpoints, allowing communication with other processes on the same host outside of the intended network restriction boundary.\r\n\r\nThis vulnerability affects Node.js **25.x** processes using the Permission Model where \u0060--allow-net\u0060 is intentionally omitted to restrict network access. Note that \u0060--allow-net\u0060 is currently an experimental feature.",
  "published": "2026-03-30T19:07:28Z",
  "severity": "Important",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "cwe": "CWE-284: Improper Access Control",
  "epss": 0.00166,
  "epssPercentile": 0.05942,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2026-21711",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Node.js",
      "fixedVersion": "25.8.2",
      "fix": "Node.js 25.8.2",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs-25.8.2",
      "released": "2026-03-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:24.14.1-2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.14.1-2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:24.14.1-2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:24.14.1-2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:24.14.1-2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.14.1-2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:24.14.1-2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:24.14.1-2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 8",
      "fixedVersion": "1:24.14.1-2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.14.1-2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:3.0.3-1.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:3.0.3-3.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "3.0.3-1.module_el8.10.0\u002B4061\u002Bf8ceeab9",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "3.0.3-3.module_el9.7.0\u002B209\u002Becf6523e",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:3.0.3-1.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:3.0.3-3.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:3.0.3-1.module\u002Bel8.10.0\u002B2084\u002Bab509703",
      "fix": "RLSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7670",
      "released": "2026-04-13T06:01:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 9",
      "fixedVersion": "0:3.0.3-3.module\u002Bel9.7.0\u002B40025\u002B0e0cf6b2",
      "fix": "RLSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7350",
      "released": "2026-04-10T00:04:09Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4086\u002B70facd4a",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B209\u002Becf6523e",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B40048\u002B6d99f608",
      "fix": "RLSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7670",
      "released": "2026-04-13T06:01:13Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B40052\u002Be32ea525",
      "fix": "RLSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7350",
      "released": "2026-04-10T00:04:09Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4086\u002B70facd4a",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B198\u002B8bf605ba",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "RHEL 10",
      "fixedVersion": "24.14.1-2.el10_1",
      "fix": "RHSA-2026:7675",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7675",
      "released": "2026-03-12T22:28:45Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "rocky 10",
      "fixedVersion": "1:24.14.1-2.el10_1",
      "fix": "RLSA-2026:7675",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7675",
      "released": "2026-04-15T12:07:10Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:24.14.1-2.el10_1",
      "fix": "ALSA-2026:7675",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7675",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.el10_1",
      "fix": "ALSA-2026:7675",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7675",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "ol 10",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "ol 8",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "ol 9",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    }
  ],
  "noFixYet": [
    {
      "platform": "Windows apps",
      "product": "Node.js 10",
      "status": "no-fix",
      "affectedVersion": "10.24.1"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 12",
      "status": "no-fix",
      "affectedVersion": "12.22.12"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 14",
      "status": "no-fix",
      "affectedVersion": "14.21.3"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 15",
      "status": "no-fix",
      "affectedVersion": "15.14.0"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 16",
      "status": "no-fix",
      "affectedVersion": "16.20.2"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 17",
      "status": "no-fix",
      "affectedVersion": "17.9.1"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 18",
      "status": "no-fix",
      "affectedVersion": "18.20.8"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 19",
      "status": "no-fix",
      "affectedVersion": "19.9.0"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 4",
      "status": "no-fix",
      "affectedVersion": "4.8.7"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 6",
      "status": "no-fix",
      "affectedVersion": "6.17.0"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 7",
      "status": "no-fix",
      "affectedVersion": "7.1.0"
    },
    {
      "platform": "Windows apps",
      "product": "Node.js 8",
      "status": "no-fix",
      "affectedVersion": "8.11.3"
    }
  ],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}