{
  "cveId": "CVE-2026-26996",
  "url": "https://patchblox.com/security/cve/CVE-2026-26996",
  "summary": "CVE-2026-26996 is fixed in 28 products on 1 platform, first by DEBIAN-CVE-2026-26996, released February 20, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "nodejs-libs: Node.js is a software development platform for building fast and scalable network applications in the JavaScript prog...",
  "description": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* nodejs: Nodejs denial of service (CVE-2026-21637)\n\n* minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)\n\n* undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581)\n\n* undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527)\n\n* undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate decompression (CVE-2026-1526)\n\n* undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter (CVE-2026-2229)\n\n* undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers (CVE-2026-1525)\n\n* undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)\n\n* nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)\n\n* Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing (CVE-2026-21712)\n\n* Node.js: Node.js: Denial of Service due to crafted HTTP \u0060__proto__\u0060 header (CVE-2026-21710)\n\n* Node.js: Node.js: Information disclosure due to \u0060fs.realpathSync.native()\u0060 bypassing filesystem read restrictions (CVE-2026-21715)\n\n* nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. (CVE-2026-21716)\n\n* Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission checks (CVE-2026-21711)\n\n* Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713)\n\n* Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames (CVE-2026-21714)\n\n* nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions (CVE-2026-21717)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2026-02-20T03:05:21Z",
  "severity": "Important",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00577,
  "epssPercentile": 0.47831,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "cockpit",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "364-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21399-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21399-1",
      "released": "2026-07-21T15:45:48Z"
    },
    {
      "platform": "linux",
      "product": "cockpit",
      "release": "sles 16.0",
      "fixedVersion": "364-160000.1.1",
      "fix": "SUSE-SU-2026:22837-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22837-1",
      "released": "2026-07-21T16:05:47Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-machines",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "354-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21399-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21399-1",
      "released": "2026-07-21T15:45:48Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-machines",
      "release": "sles 16.0",
      "fixedVersion": "354-160000.1.1",
      "fix": "SUSE-SU-2026:22837-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22837-1",
      "released": "2026-07-21T16:05:47Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-packages",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "5-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21399-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21399-1",
      "released": "2026-07-21T15:45:48Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-packages",
      "release": "sles 16.0",
      "fixedVersion": "5-160000.1.1",
      "fix": "SUSE-SU-2026:22837-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22837-1",
      "released": "2026-07-21T16:05:47Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-podman",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "128-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21399-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21399-1",
      "released": "2026-07-21T15:45:48Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-podman",
      "release": "sles 16.0",
      "fixedVersion": "128-160000.1.1",
      "fix": "SUSE-SU-2026:22837-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22837-1",
      "released": "2026-07-21T16:05:47Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-repos",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "4.8-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21399-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21399-1",
      "released": "2026-07-21T15:45:48Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-repos",
      "release": "sles 16.0",
      "fixedVersion": "4.8-160000.1.1",
      "fix": "SUSE-SU-2026:22837-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22837-1",
      "released": "2026-07-21T16:05:47Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-subscriptions",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "16.2-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21399-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21399-1",
      "released": "2026-07-21T15:45:48Z"
    },
    {
      "platform": "linux",
      "product": "cockpit-subscriptions",
      "release": "sles 16.0",
      "fixedVersion": "16.2-160000.1.1",
      "fix": "SUSE-SU-2026:22837-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22837-1",
      "released": "2026-07-21T16:05:47Z"
    },
    {
      "platform": "linux",
      "product": "node-minimatch",
      "release": "Debian 14",
      "fixedVersion": "9.0.7-1",
      "fix": "DEBIAN-CVE-2026-26996",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-26996",
      "released": "2026-02-20T03:16:01Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:20.20.2-1.module\u002Bel8.10.0\u002B24197\u002B1602b452",
      "fix": "RHSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-8339",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:20.20.2-1.module\u002Bel9.7.0\u002B24193\u002B41b7b572",
      "fix": "RHSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7896",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:20.20.2-1.module_el8.10.0\u002B4165\u002B3f200bda",
      "fix": "ALSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-8339",
      "released": "2026-04-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:20.20.2-1.module_el9.7.0\u002B226\u002B88d36870",
      "fix": "ALSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7896",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 10",
      "fixedVersion": "1:22.22.2-1.el10_1",
      "fix": "ELSA-2026-7080",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7080",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:22.22.2-1.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:22.22.2-1.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:20.20.2-1.module\u002Bel8.10.0\u002B24197\u002B1602b452",
      "fix": "RHSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-8339",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:20.20.2-1.module\u002Bel9.7.0\u002B24193\u002B41b7b572",
      "fix": "RHSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7896",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:20.20.2-1.module_el8.10.0\u002B4165\u002B3f200bda",
      "fix": "ALSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-8339",
      "released": "2026-04-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:20.20.2-1.module_el9.7.0\u002B224\u002B0af7cc6b",
      "fix": "ALSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7896",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 10",
      "fixedVersion": "1:22.22.2-1.el10_1",
      "fix": "ELSA-2026-7080",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7080",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:22.22.2-1.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:22.22.2-1.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:20.20.2-1.module\u002Bel8.10.0\u002B24197\u002B1602b452",
      "fix": "RHSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-8339",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:20.20.2-1.module\u002Bel9.7.0\u002B24193\u002B41b7b572",
      "fix": "RHSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7896",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.22.2-1.el10_1",
      "fix": "ALSA-2026:7080",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7080",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:20.20.2-1.module_el8.10.0\u002B4165\u002B3f200bda",
      "fix": "ALSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-8339",
      "released": "2026-04-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:20.20.2-1.module_el9.7.0\u002B224\u002B0af7cc6b",
      "fix": "ALSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7896",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 10",
      "fixedVersion": "1:22.22.2-1.el10_1",
      "fix": "ELSA-2026-7080",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7080",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:22.22.2-1.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:22.22.2-1.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:20.20.2-1.module\u002Bel8.10.0\u002B24197\u002B1602b452",
      "fix": "RHSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-8339",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:20.20.2-1.module\u002Bel9.7.0\u002B24193\u002B41b7b572",
      "fix": "RHSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7896",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:20.20.2-1.module_el8.10.0\u002B4165\u002B3f200bda",
      "fix": "ALSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-8339",
      "released": "2026-04-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:20.20.2-1.module_el9.7.0\u002B224\u002B0af7cc6b",
      "fix": "ALSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7896",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:22.22.2-1.el10_1",
      "fix": "ELSA-2026-7080",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7080",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:22.22.2-1.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:22.22.2-1.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 8",
      "fixedVersion": "1:24.14.1-2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.14.1-2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 8",
      "fixedVersion": "1:24.14.1-2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.14.1-2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 10",
      "fixedVersion": "1:22.22.2-1.el10_1",
      "fix": "ELSA-2026-7080",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7080",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 8",
      "fixedVersion": "1:22.22.2-1.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:22.22.2-1.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B23521\u002B490ebfde",
      "fix": "RHSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-8339",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.7.0\u002B24193\u002B41b7b572",
      "fix": "RHSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7896",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "3.0.1-1.module_el8.10.0\u002B3982\u002B85c136aa",
      "fix": "ALSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-8339",
      "released": "2026-04-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "3.0.1-1.module_el9.5.0\u002B125\u002B8dc38870",
      "fix": "ALSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7896",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B1924\u002B614dc87f",
      "fix": "RLSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-8339",
      "released": "2026-04-16T00:01:17Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.7.0\u002B40017\u002Bf0db1785",
      "fix": "RLSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7896",
      "released": "2026-04-14T00:03:57Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "ol 10",
      "fixedVersion": "1:10.9.7-1.22.22.2.1.el10_1",
      "fix": "ELSA-2026-7080",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7080",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24197\u002B1602b452",
      "fix": "RHSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-8339",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B24193\u002B41b7b572",
      "fix": "RHSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7896",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4165\u002B3f200bda",
      "fix": "ALSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-8339",
      "released": "2026-04-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B226\u002B88d36870",
      "fix": "ALSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7896",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B40048\u002B6d99f608",
      "fix": "RLSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-8339",
      "released": "2026-04-16T00:01:17Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B40052\u002Be32ea525",
      "fix": "RLSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7896",
      "released": "2026-04-14T00:03:57Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24197\u002B1602b452",
      "fix": "RHSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-8339",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B24193\u002B41b7b572",
      "fix": "RHSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7896",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4165\u002B3f200bda",
      "fix": "ALSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-8339",
      "released": "2026-04-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B226\u002B88d36870",
      "fix": "ALSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7896",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-4.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "RHEL 10",
      "fixedVersion": "22.22.2-2.el10_0",
      "fix": "RHSA-2026:7310",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7310",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "rocky 10",
      "fixedVersion": "1:22.22.2-1.el10_1",
      "fix": "RLSA-2026:7080",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7080",
      "released": "2026-04-12T06:07:10Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "RHEL 10",
      "fixedVersion": "24.14.1-2.el10_1",
      "fix": "RHSA-2026:7675",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7675",
      "released": "2026-03-12T22:28:45Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "rocky 10",
      "fixedVersion": "1:24.14.1-2.el10_1",
      "fix": "RLSA-2026:7675",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-7675",
      "released": "2026-04-15T12:07:10Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:24.14.1-2.el10_1",
      "fix": "ALSA-2026:7675",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7675",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "ol 10",
      "fixedVersion": "1:24.14.1-2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.el10_1",
      "fix": "ALSA-2026:7675",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7675",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "ol 10",
      "fixedVersion": "1:11.11.0-1.24.14.1.2.0.2.el10_1",
      "fix": "ELSA-2026-7675",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7675",
      "released": "2026-06-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:10.8.2-1.20.20.2.1.module\u002Bel8.10.0\u002B24197\u002B1602b452",
      "fix": "RHSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-8339",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:10.8.2-1.20.20.2.1.module\u002Bel9.7.0\u002B24193\u002B41b7b572",
      "fix": "RHSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7896",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:10.8.2-1.20.20.2.1.module_el8.10.0\u002B4165\u002B3f200bda",
      "fix": "ALSA-2026:8339",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-8339",
      "released": "2026-04-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:10.8.2-1.20.20.2.1.module_el9.7.0\u002B224\u002B0af7cc6b",
      "fix": "ALSA-2026:7896",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7896",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:10.9.7-1.22.22.2.1.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:10.9.7-1.22.22.2.1.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "openQA",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "5.1783076943.6691832d-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:21266-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21266-1",
      "released": "2026-07-06T21:23:10Z"
    },
    {
      "platform": "linux",
      "product": "os-autoinst",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "5.1783082953.c3cb41d-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:21266-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21266-1",
      "released": "2026-07-06T21:23:10Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:12.4.254.21-1.22.22.2.1.module\u002Bel8.10.0\u002B24148\u002B847b6786",
      "fix": "RHSA-2026:7123",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7123",
      "released": "2026-04-15T19:03:41Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:12.4.254.21-1.22.22.2.1.module\u002Bel9.7.0\u002B24157\u002B8ddb2461",
      "fix": "RHSA-2026:7302",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7302",
      "released": "2026-04-15T19:05:11Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:12.4.254.21-1.22.22.2.1.module_el8.10.0\u002B4158\u002Be796f37f",
      "fix": "ALSA-2026:7123",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7123",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 8",
      "fixedVersion": "3:12.4.254.21-1.22.22.2.1.module\u002Bel8.10.0\u002B90865\u002Bd647ef3a",
      "fix": "ELSA-2026-7123",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7123",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 9",
      "fixedVersion": "3:12.4.254.21-1.22.22.2.1.module\u002Bel9.7.0\u002B90867\u002B2ede48fe",
      "fix": "ELSA-2026-7302",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7302",
      "released": "2026-04-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module\u002Bel8.10.0\u002B24190\u002B49a46c75",
      "fix": "RHSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7670",
      "released": "2026-03-12T22:27:24Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module\u002Bel9.7.0\u002B24166\u002B51c9666b",
      "fix": "RHSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-7350",
      "released": "2026-03-12T22:28:44Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module_el8.10.0\u002B4160\u002B4819ac42",
      "fix": "ALSA-2026:7670",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module_el9.7.0\u002B222\u002Bef1c61e1",
      "fix": "ALSA-2026:7350",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-7350",
      "released": "2026-04-09T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "ol 8",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module\u002Bel8.10.0\u002B90873\u002B35652ecc",
      "fix": "ELSA-2026-7670",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7670",
      "released": "2026-04-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "ol 9",
      "fixedVersion": "3:13.6.233.17-1.24.14.1.2.module\u002Bel9.7.0\u002B90866\u002B5a953a4c",
      "fix": "ELSA-2026-7350",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-7350",
      "released": "2026-04-10T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}