# CVE-2026-25547: nodejs: Node.js is a software development platform for building fast and scalable network applications in the JavaScript prog...

CVE-2026-25547 is fixed in 49 products on 1 platform, first by DEBIAN-CVE-2026-25547, released February 4, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-25547
- Priority: High
- CVSS: 7.5 (Important)
- EPSS: 0.0054
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 4, 2026

## Description

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.   Security Fix(es):  * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)  * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)  * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions (CVE-2026-27904)  * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526)  * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229)  * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525)  * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)  * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)  * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | cockpit opensuse-leap 16.0 | 364-160000.1.1 | [OPENSUSE-SU-2026:21399-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21399-1.md) | Jul 21, 2026 |
| Linux | cockpit sles 16.0 | 364-160000.1.1 | [SUSE-SU-2026:22837-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22837-1.md) | Jul 21, 2026 |
| Linux | cockpit-machines opensuse-leap 16.0 | 354-160000.1.1 | [OPENSUSE-SU-2026:21399-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21399-1.md) | Jul 21, 2026 |
| Linux | cockpit-machines sles 16.0 | 354-160000.1.1 | [SUSE-SU-2026:22837-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22837-1.md) | Jul 21, 2026 |
| Linux | cockpit-packages opensuse-leap 16.0 | 5-160000.1.1 | [OPENSUSE-SU-2026:21399-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21399-1.md) | Jul 21, 2026 |
| Linux | cockpit-packages sles 16.0 | 5-160000.1.1 | [SUSE-SU-2026:22837-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22837-1.md) | Jul 21, 2026 |
| Linux | cockpit-podman opensuse-leap 16.0 | 128-160000.1.1 | [OPENSUSE-SU-2026:21399-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21399-1.md) | Jul 21, 2026 |
| Linux | cockpit-podman sles 16.0 | 128-160000.1.1 | [SUSE-SU-2026:22837-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22837-1.md) | Jul 21, 2026 |
| Linux | cockpit-repos opensuse-leap 16.0 | 4.8-160000.1.1 | [OPENSUSE-SU-2026:21399-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21399-1.md) | Jul 21, 2026 |
| Linux | cockpit-repos sles 16.0 | 4.8-160000.1.1 | [SUSE-SU-2026:22837-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22837-1.md) | Jul 21, 2026 |
| Linux | cockpit-subscriptions opensuse-leap 16.0 | 16.2-160000.1.1 | [OPENSUSE-SU-2026:21399-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21399-1.md) | Jul 21, 2026 |
| Linux | cockpit-subscriptions sles 16.0 | 16.2-160000.1.1 | [SUSE-SU-2026:22837-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22837-1.md) | Jul 21, 2026 |
| Linux | dracut-saltboot opensuse-leap 15.6 | 1.1.0-150000.1.65.1 | [SUSE-SU-2026:1013-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1013-1.md) | Mar 25, 2026 |
| Linux | golang-github-QubitProducts-exporter_exporter opensuse-leap 15.6 | 0.4.0-150000.1.21.1 | [SUSE-SU-2026:1013-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1013-1.md) | Mar 25, 2026 |
| Linux | golang-github-boynux-squid_exporter opensuse-leap 15.6 | 1.13.0-150000.1.12.1 | [SUSE-SU-2026:1013-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1013-1.md) | Mar 25, 2026 |
| Linux | golang-github-lusitaniae-apache_exporter opensuse-leap 15.6 | 1.0.10-150000.1.26.1 | [SUSE-SU-2026:1013-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1013-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-alertmanager opensuse-leap 15.6 | 0.28.1-150100.4.31.1 | [SUSE-SU-2026:1008-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1008-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-alertmanager sles 15.7 | 0.28.1-150100.4.31.1 | [SUSE-SU-2026:1008-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1008-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-node_exporter opensuse-leap 15.6 | 1.9.1-150100.3.38.1 | [SUSE-SU-2026:1008-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1008-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-node_exporter sles 15.6 | 1.9.1-150100.3.38.1 | [SUSE-SU-2026:1008-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1008-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-node_exporter sles 15.7 | 1.9.1-150100.3.38.1 | [SUSE-SU-2026:1008-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1008-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-prometheus opensuse-leap 15.6 | 3.5.0-150100.4.29.1 | [SUSE-SU-2026:1008-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1008-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-prometheus opensuse-leap 16.0 | 3.5.0-160000.2.1 | [OPENSUSE-SU-2026:20239-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20239-1.md) | Feb 17, 2026 |
| Linux | golang-github-prometheus-prometheus sles 15.7 | 3.5.0-150100.4.29.1 | [SUSE-SU-2026:1008-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1008-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-promu opensuse-leap 15.6 | 0.17.0-150000.3.30.1 | [SUSE-SU-2026:1013-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1013-1.md) | Mar 25, 2026 |
| Linux | golang-github-prometheus-promu sles 15.7 | 0.17.0-150000.3.30.1 | [SUSE-SU-2026:1013-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1013-1.md) | Mar 25, 2026 |
| Linux | node-brace-expansion Debian 14 | 2.0.3+~1.1.2-2 | [DEBIAN-CVE-2026-25547](https://patchblox.com/security/data/fix/linux/debian-cve-2026-25547.md) | Feb 4, 2026 |
| Linux | nodejs RHEL 8 | 1:22.22.2-1.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | nodejs RHEL 9 | 1:24.14.1-2.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | nodejs almalinux 8 | 1:22.22.2-1.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | nodejs almalinux 9 | 1:24.14.1-2.module_el9.7.0+222+ef1c61e1 | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | nodejs ol 10 | 1:22.22.2-1.el10_1 | [ELSA-2026-7080](https://patchblox.com/security/data/fix/linux/elsa-2026-7080.md) | Apr 8, 2026 |
| Linux | nodejs ol 8 | 1:22.22.2-1.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs ol 9 | 1:22.22.2-1.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | nodejs-devel RHEL 8 | 1:22.22.2-1.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | nodejs-devel RHEL 9 | 1:24.14.1-2.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | nodejs-devel almalinux 8 | 1:22.22.2-1.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | nodejs-devel almalinux 9 | 1:24.14.1-2.module_el9.7.0+222+ef1c61e1 | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | nodejs-devel ol 10 | 1:22.22.2-1.el10_1 | [ELSA-2026-7080](https://patchblox.com/security/data/fix/linux/elsa-2026-7080.md) | Apr 8, 2026 |
| Linux | nodejs-devel ol 8 | 1:22.22.2-1.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-devel ol 9 | 1:22.22.2-1.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | nodejs-docs RHEL 8 | 1:22.22.2-1.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | nodejs-docs RHEL 9 | 1:24.14.1-2.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | nodejs-docs almalinux 10 | 1:22.22.2-1.el10_1 | [ALSA-2026:7080](https://patchblox.com/security/data/fix/linux/alsa-2026-7080.md) | Apr 8, 2026 |
| Linux | nodejs-docs almalinux 8 | 1:22.22.2-1.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | nodejs-docs almalinux 9 | 1:24.14.1-2.module_el9.7.0+222+ef1c61e1 | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | nodejs-docs ol 10 | 1:22.22.2-1.el10_1 | [ELSA-2026-7080](https://patchblox.com/security/data/fix/linux/elsa-2026-7080.md) | Apr 8, 2026 |
| Linux | nodejs-docs ol 8 | 1:22.22.2-1.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-docs ol 9 | 1:22.22.2-1.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | nodejs-full-i18n RHEL 8 | 1:22.22.2-1.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | nodejs-full-i18n RHEL 9 | 1:24.14.1-2.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | nodejs-full-i18n almalinux 8 | 1:22.22.2-1.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | nodejs-full-i18n almalinux 9 | 1:24.14.1-2.module_el9.7.0+222+ef1c61e1 | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | nodejs-full-i18n ol 10 | 1:22.22.2-1.el10_1 | [ELSA-2026-7080](https://patchblox.com/security/data/fix/linux/elsa-2026-7080.md) | Apr 8, 2026 |
| Linux | nodejs-full-i18n ol 8 | 1:22.22.2-1.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-full-i18n ol 9 | 1:22.22.2-1.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | nodejs-libs RHEL 8 | 1:22.22.2-1.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | nodejs-libs RHEL 9 | 1:24.14.1-2.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | nodejs-libs almalinux 8 | 1:22.22.2-1.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | nodejs-libs almalinux 9 | 1:24.14.1-2.module_el9.7.0+222+ef1c61e1 | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | nodejs-libs ol 10 | 1:22.22.2-1.el10_1 | [ELSA-2026-7080](https://patchblox.com/security/data/fix/linux/elsa-2026-7080.md) | Apr 8, 2026 |
| Linux | nodejs-libs ol 8 | 1:22.22.2-1.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-libs ol 9 | 1:22.22.2-1.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | nodejs-nodemon RHEL 8 | 0:3.0.1-1.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | nodejs-nodemon RHEL 9 | 0:3.0.3-3.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | nodejs-nodemon almalinux 8 | 3.0.1-1.module_el8.10.0+4006+3c416519 | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | nodejs-nodemon almalinux 9 | 3.0.3-3.module_el9.7.0+209+ecf6523e | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | nodejs-nodemon ol 8 | 0:3.0.1-1.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-nodemon ol 9 | 0:3.0.1-1.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | nodejs-nodemon rocky 8 | 0:3.0.1-1.module+el8.10.0+1666+930e28e8 | [RLSA-2026:7123](https://patchblox.com/security/data/fix/linux/rlsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-nodemon rocky 9 | 0:3.0.3-3.module+el9.7.0+40025+0e0cf6b2 | [RLSA-2026:7350](https://patchblox.com/security/data/fix/linux/rlsa-2026-7350.md) | Apr 10, 2026 |
| Linux | nodejs-npm ol 10 | 1:10.9.7-1.22.22.2.1.el10_1 | [ELSA-2026-7080](https://patchblox.com/security/data/fix/linux/elsa-2026-7080.md) | Apr 8, 2026 |
| Linux | nodejs-packaging RHEL 8 | 0:2021.06-6.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | nodejs-packaging RHEL 9 | 0:2021.06-6.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | nodejs-packaging almalinux 8 | 2021.06-6.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | nodejs-packaging almalinux 9 | 2021.06-6.module_el9.7.0+209+ecf6523e | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | nodejs-packaging ol 8 | 0:2021.06-4.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-packaging ol 9 | 0:2021.06-6.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | nodejs-packaging rocky 8 | 0:2021.06-6.module+el8.10.0+40048+6d99f608 | [RLSA-2026:7123](https://patchblox.com/security/data/fix/linux/rlsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-packaging rocky 9 | 0:2021.06-6.module+el9.7.0+40052+e32ea525 | [RLSA-2026:7350](https://patchblox.com/security/data/fix/linux/rlsa-2026-7350.md) | Apr 10, 2026 |
| Linux | nodejs-packaging-bundler RHEL 8 | 0:2021.06-6.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | nodejs-packaging-bundler RHEL 9 | 0:2021.06-6.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | nodejs-packaging-bundler almalinux 8 | 2021.06-6.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | nodejs-packaging-bundler almalinux 9 | 2021.06-6.module_el9.7.0+198+8bf605ba | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | nodejs-packaging-bundler ol 8 | 0:2021.06-4.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | nodejs-packaging-bundler ol 9 | 0:2021.06-6.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | nodejs22 RHEL 10 | 22.22.2-2.el10_0 | [RHSA-2026:7310](https://patchblox.com/security/data/fix/linux/rhsa-2026-7310.md) | Apr 15, 2026 |
| Linux | nodejs22 amzn 2023 | 1:22.22.2-1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs22 rocky 10 | 1:22.22.2-1.el10_1 | [RLSA-2026:7080](https://patchblox.com/security/data/fix/linux/rlsa-2026-7080.md) | Apr 12, 2026 |
| Linux | nodejs22-debuginfo amzn 2023 | 1:22.22.2-1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs22-debugsource amzn 2023 | 1:22.22.2-1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs22-devel amzn 2023 | 1:22.22.2-1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs22-docs amzn 2023 | 1:22.22.2-1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs22-full-i18n amzn 2023 | 1:22.22.2-1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs22-libs amzn 2023 | 1:22.22.2-1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs22-libs-debuginfo amzn 2023 | 1:22.22.2-1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs22-npm amzn 2023 | 1:10.9.7-1.22.22.2.1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | nodejs24 RHEL 10 | 24.14.1-2.el10_1 | [RHSA-2026:7675](https://patchblox.com/security/data/fix/linux/rhsa-2026-7675.md) | Mar 12, 2026 |
| Linux | nodejs24 amzn 2023 | 1:24.15.0-1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24 ol 10 | 1:24.14.1-2.0.2.el10_1 | [ELSA-2026-7675](https://patchblox.com/security/data/fix/linux/elsa-2026-7675.md) | Jun 9, 2026 |
| Linux | nodejs24 rocky 10 | 1:24.14.1-2.el10_1 | [RLSA-2026:7675](https://patchblox.com/security/data/fix/linux/rlsa-2026-7675.md) | Apr 15, 2026 |
| Linux | nodejs24-debuginfo amzn 2023 | 1:24.15.0-1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24-debugsource amzn 2023 | 1:24.15.0-1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24-devel amzn 2023 | 1:24.15.0-1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24-devel ol 10 | 1:24.14.1-2.0.2.el10_1 | [ELSA-2026-7675](https://patchblox.com/security/data/fix/linux/elsa-2026-7675.md) | Jun 9, 2026 |
| Linux | nodejs24-docs almalinux 10 | 1:24.14.1-2.el10_1 | [ALSA-2026:7675](https://patchblox.com/security/data/fix/linux/alsa-2026-7675.md) | Apr 13, 2026 |
| Linux | nodejs24-docs amzn 2023 | 1:24.15.0-1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24-docs ol 10 | 1:24.14.1-2.0.2.el10_1 | [ELSA-2026-7675](https://patchblox.com/security/data/fix/linux/elsa-2026-7675.md) | Jun 9, 2026 |
| Linux | nodejs24-full-i18n amzn 2023 | 1:24.15.0-1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24-full-i18n ol 10 | 1:24.14.1-2.0.2.el10_1 | [ELSA-2026-7675](https://patchblox.com/security/data/fix/linux/elsa-2026-7675.md) | Jun 9, 2026 |
| Linux | nodejs24-libs amzn 2023 | 1:24.15.0-1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24-libs ol 10 | 1:24.14.1-2.0.2.el10_1 | [ELSA-2026-7675](https://patchblox.com/security/data/fix/linux/elsa-2026-7675.md) | Jun 9, 2026 |
| Linux | nodejs24-libs-debuginfo amzn 2023 | 1:24.15.0-1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24-npm almalinux 10 | 1:11.11.0-1.24.14.1.2.el10_1 | [ALSA-2026:7675](https://patchblox.com/security/data/fix/linux/alsa-2026-7675.md) | Apr 13, 2026 |
| Linux | nodejs24-npm amzn 2023 | 1:11.12.1-1.24.15.0.1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | nodejs24-npm ol 10 | 1:11.11.0-1.24.14.1.2.0.2.el10_1 | [ELSA-2026-7675](https://patchblox.com/security/data/fix/linux/elsa-2026-7675.md) | Jun 9, 2026 |
| Linux | npm RHEL 8 | 1:10.9.7-1.22.22.2.1.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | npm RHEL 9 | 1:11.11.0-1.24.14.1.2.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | npm almalinux 8 | 1:10.9.7-1.22.22.2.1.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | npm almalinux 9 | 1:11.11.0-1.24.14.1.2.module_el9.7.0+222+ef1c61e1 | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | npm ol 8 | 1:10.9.7-1.22.22.2.1.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | npm ol 9 | 1:10.9.7-1.22.22.2.1.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | openQA opensuse-leap 16.0 | 5.1771422749.560a3b26-bp160.1.1 | [OPENSUSE-SU-2026:20261-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20261-1.md) | Feb 23, 2026 |
| Linux | os-autoinst opensuse-leap 16.0 | 5.1771353921.c8005c9-bp160.1.1 | [OPENSUSE-SU-2026:20261-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20261-1.md) | Feb 23, 2026 |
| Linux | prometheus-blackbox_exporter opensuse-leap 15.6 | 0.26.0-150000.1.30.2 | [SUSE-SU-2026:1013-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1013-1.md) | Mar 25, 2026 |
| Linux | spacecmd opensuse-leap 15.6 | 5.0.15-150000.3.142.1 | [SUSE-SU-2026:1013-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1013-1.md) | Mar 25, 2026 |
| Linux | v8-12.4-devel RHEL 8 | 3:12.4.254.21-1.22.22.2.1.module+el8.10.0+24148+847b6786 | [RHSA-2026:7123](https://patchblox.com/security/data/fix/linux/rhsa-2026-7123.md) | Apr 15, 2026 |
| Linux | v8-12.4-devel RHEL 9 | 3:12.4.254.21-1.22.22.2.1.module+el9.7.0+24157+8ddb2461 | [RHSA-2026:7302](https://patchblox.com/security/data/fix/linux/rhsa-2026-7302.md) | Apr 15, 2026 |
| Linux | v8-12.4-devel almalinux 8 | 3:12.4.254.21-1.22.22.2.1.module_el8.10.0+4158+e796f37f | [ALSA-2026:7123](https://patchblox.com/security/data/fix/linux/alsa-2026-7123.md) | Apr 8, 2026 |
| Linux | v8-12.4-devel amzn 2023 | 3:12.4.254.21-1.22.22.2.1.amzn2023.0.3 | [ALAS2023-2026-1648](https://patchblox.com/security/data/fix/linux/alas2023-2026-1648.md) | May 11, 2026 |
| Linux | v8-12.4-devel ol 8 | 3:12.4.254.21-1.22.22.2.1.module+el8.10.0+90865+d647ef3a | [ELSA-2026-7123](https://patchblox.com/security/data/fix/linux/elsa-2026-7123.md) | Apr 9, 2026 |
| Linux | v8-12.4-devel ol 9 | 3:12.4.254.21-1.22.22.2.1.module+el9.7.0+90867+2ede48fe | [ELSA-2026-7302](https://patchblox.com/security/data/fix/linux/elsa-2026-7302.md) | Apr 10, 2026 |
| Linux | v8-13.6-devel RHEL 9 | 3:13.6.233.17-1.24.14.1.2.module+el9.7.0+24166+51c9666b | [RHSA-2026:7350](https://patchblox.com/security/data/fix/linux/rhsa-2026-7350.md) | Mar 12, 2026 |
| Linux | v8-13.6-devel almalinux 9 | 3:13.6.233.17-1.24.14.1.2.module_el9.7.0+222+ef1c61e1 | [ALSA-2026:7350](https://patchblox.com/security/data/fix/linux/alsa-2026-7350.md) | Apr 9, 2026 |
| Linux | v8-13.6-devel amzn 2023 | 3:13.6.233.17-1.24.15.0.1.amzn2023.0.1 | [ALAS2023-2026-1609](https://patchblox.com/security/data/fix/linux/alas2023-2026-1609.md) | Apr 27, 2026 |
| Linux | v8-13.6-devel ol 9 | 3:13.6.233.17-1.24.14.1.2.module+el9.7.0+90866+5a953a4c | [ELSA-2026-7350](https://patchblox.com/security/data/fix/linux/elsa-2026-7350.md) | Apr 10, 2026 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.