{
  "cveId": "CVE-2026-42338",
  "url": "https://patchblox.com/security/cve/CVE-2026-42338",
  "summary": "CVE-2026-42338 is fixed in 22 products on 1 platform, first by DEBIAN-CVE-2026-42338, released May 12, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "rh-podman-desktop: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript",
  "description": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressError.parseMessage (emitted by the Address6 constructor for invalid input) can contain unescaped attacker-controlled content in one branch. An application that (1) passes untrusted input to Address6 and (2) renders the output of these methods, or the thrown error\u0027s parseMessage, as HTML (e.g. via innerHTML) is vulnerable to cross-site scripting. This vulnerability is fixed in 10.1.1.",
  "published": "2026-05-12T19:43:16Z",
  "severity": "important",
  "cvss": 8.1,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
  "epss": 0.00471,
  "epssPercentile": 0.40983,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "node-ip-address",
      "release": "Debian 14",
      "fixedVersion": "10.2.0-2",
      "fix": "DEBIAN-CVE-2026-42338",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-42338",
      "released": "2026-05-12T20:16:41Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-1.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B24457\u002B996af7aa",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ALSA-2026:35842",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35842",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-1.module_el8.10.0\u002B4231\u002B1bf2f855",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.23.1-1.module_el9.8.0\u002B276\u002B8b329b47",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ELSA-2026-35842",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35842",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-1.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "rocky 8",
      "fixedVersion": "1:24.18.0-1.module\u002Bel8.10.0\u002B40252\u002Ba58646bc",
      "fix": "RLSA-2026:39868",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-39868",
      "released": "2026-07-16T00:01:09Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-1.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B24457\u002B996af7aa",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ALSA-2026:35842",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35842",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-1.module_el8.10.0\u002B4231\u002B1bf2f855",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:22.23.1-1.module_el9.8.0\u002B276\u002B8b329b47",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ELSA-2026-35842",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35842",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-1.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-1.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B24457\u002B996af7aa",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ALSA-2026:35842",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35842",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-1.module_el8.10.0\u002B4231\u002B1bf2f855",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.23.1-1.module_el9.8.0\u002B276\u002B8b329b47",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ELSA-2026-35842",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35842",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-1.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-1.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B24457\u002B996af7aa",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ALSA-2026:35842",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35842",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-1.module_el8.10.0\u002B4231\u002B1bf2f855",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:22.23.1-1.module_el9.8.0\u002B276\u002B8b329b47",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ELSA-2026-35842",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35842",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-1.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 8",
      "fixedVersion": "1:22.23.1-1.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B24457\u002B996af7aa",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ALSA-2026:35842",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35842",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 8",
      "fixedVersion": "1:22.23.1-1.module_el8.10.0\u002B4231\u002B1bf2f855",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:22.23.1-1.module_el9.8.0\u002B276\u002B8b329b47",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "ELSA-2026-35842",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35842",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 8",
      "fixedVersion": "1:24.18.0-1.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "ol 9",
      "fixedVersion": "1:22.23.1-1.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.8.0\u002B24156\u002Bbb41d456",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "3.0.1-1.module_el8.10.0\u002B3956\u002B47c9ee9f",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "3.0.1-1.module_el9.7.0\u002B208\u002Bfb06c0ab",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 8",
      "fixedVersion": "0:3.0.3-1.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "ol 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 8",
      "fixedVersion": "0:3.0.1-1.module\u002Bel8.9.0\u002B1760\u002B903d54b9",
      "fix": "RLSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-41947",
      "released": "2026-07-20T18:01:02Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "rocky 9",
      "fixedVersion": "0:3.0.1-1.module\u002Bel9.7.0\u002B40165\u002Bd075e3f2",
      "fix": "RLSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-35892",
      "released": "2026-07-07T00:03:33Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:10.9.8-1.22.23.1.2.el10_2",
      "fix": "ALSA-2026:35842",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35842",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "ol 10",
      "fixedVersion": "1:10.9.8-1.22.23.1.2.el10_2",
      "fix": "ELSA-2026-35842",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35842",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B24156\u002Bbb41d456",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4158\u002Be796f37f",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B227\u002B12323393",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B40048\u002B6d99f608",
      "fix": "RLSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-41947",
      "released": "2026-07-20T18:01:02Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "rocky 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.7.0\u002B40153\u002B4d595597",
      "fix": "RLSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-35892",
      "released": "2026-07-07T00:03:33Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B24156\u002Bbb41d456",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4158\u002Be796f37f",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B227\u002B12323393",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "ol 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "sles 15.6",
      "fixedVersion": "20.20.2-150600.3.21.1",
      "fix": "SUSE-SU-2026:3929-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3929-1",
      "released": "2026-09-03T07:18:06Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "RHEL 10",
      "fixedVersion": "22.23.1-2.el10_0",
      "fix": "RHSA-2026:39246",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-39246",
      "released": "2026-07-06T15:21:59Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "22.23.0-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21058-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21058-1",
      "released": "2026-06-25T13:50:58Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "rocky 10",
      "fixedVersion": "1:22.23.1-2.el10_2",
      "fix": "RLSA-2026:35842",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-35842",
      "released": "2026-07-08T12:06:21Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 15.6",
      "fixedVersion": "22.23.0-150600.13.18.1",
      "fix": "SUSE-SU-2026:2647-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2647-1",
      "released": "2026-06-26T10:34:05Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 15.7",
      "fixedVersion": "22.23.0-150700.3.12.1",
      "fix": "SUSE-SU-2026:2695-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2695-1",
      "released": "2026-06-30T09:06:44Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 16.0",
      "fixedVersion": "22.23.0-160000.1.1",
      "fix": "SUSE-SU-2026:22368-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22368-1",
      "released": "2026-06-25T12:57:12Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "RHEL 10",
      "fixedVersion": "24.18.0-1.el10_2",
      "fix": "RHSA-2026:35841",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35841",
      "released": "2026-07-06T15:21:59Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-1.el10_2",
      "fix": "ALSA-2026:35841",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35841",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-1.0.1.el10_2",
      "fix": "ELSA-2026-35841",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35841",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "24.18.0-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21236-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21236-1",
      "released": "2026-07-06T20:22:33Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "rocky 10",
      "fixedVersion": "1:24.18.0-1.el10_2",
      "fix": "RLSA-2026:35841",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2026-35841",
      "released": "2026-07-10T12:05:34Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "sles 15.7",
      "fixedVersion": "24.17.0-150700.15.11.1",
      "fix": "SUSE-SU-2026:2633-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2633-1",
      "released": "2026-06-25T13:34:12Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "sles 16.0",
      "fixedVersion": "24.18.0-160000.1.1",
      "fix": "SUSE-SU-2026:22565-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22565-1",
      "released": "2026-07-06T20:22:30Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-1.el10_2",
      "fix": "ALSA-2026:35841",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35841",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-1.0.1.el10_2",
      "fix": "ELSA-2026-35841",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35841",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-1.el10_2",
      "fix": "ALSA-2026:35841",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35841",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-1.0.1.el10_2",
      "fix": "ELSA-2026-35841",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35841",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-1.el10_2",
      "fix": "ALSA-2026:35841",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35841",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-1.0.1.el10_2",
      "fix": "ELSA-2026-35841",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35841",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "almalinux 10",
      "fixedVersion": "1:24.18.0-1.el10_2",
      "fix": "ALSA-2026:35841",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35841",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "ol 10",
      "fixedVersion": "1:24.18.0-1.0.1.el10_2",
      "fix": "ELSA-2026-35841",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35841",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:11.16.0-1.24.18.0.1.el10_2",
      "fix": "ALSA-2026:35841",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35841",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "ol 10",
      "fixedVersion": "1:11.16.0-1.24.18.0.1.0.1.el10_2",
      "fix": "ELSA-2026-35841",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35841",
      "released": "2026-07-16T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:10.9.8-1.22.23.1.1.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:10.9.8-1.22.23.1.1.module\u002Bel9.8.0\u002B24457\u002B996af7aa",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:10.9.8-1.22.23.1.1.module_el8.10.0\u002B4231\u002B1bf2f855",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:10.9.8-1.22.23.1.1.module_el9.8.0\u002B276\u002B8b329b47",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 8",
      "fixedVersion": "1:11.16.0-1.24.18.0.1.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "ol 9",
      "fixedVersion": "1:10.9.8-1.22.23.1.1.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "rh-podman-desktop",
      "release": "RHEL 10",
      "fixedVersion": "1.1.2-1.el10_2",
      "fix": "RHSA-2026:57590",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-57590",
      "released": "2026-08-21T23:39:10Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.1.module\u002Bel8.10.0\u002B24500\u002B8eb51621",
      "fix": "RHSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-41947",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.1.module\u002Bel9.8.0\u002B24457\u002B996af7aa",
      "fix": "RHSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35892",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.1.module_el8.10.0\u002B4231\u002B1bf2f855",
      "fix": "ALSA-2026:41947",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-41947",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.1.module_el9.8.0\u002B276\u002B8b329b47",
      "fix": "ALSA-2026:35892",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35892",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 8",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.1.module\u002Bel8.10.0\u002B90968\u002Be271b286",
      "fix": "ELSA-2026-41947",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-41947",
      "released": "2026-07-21T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "ol 9",
      "fixedVersion": "3:12.4.254.21-1.22.23.1.1.module\u002Bel9.8.0\u002B90947\u002Bd3e8e647",
      "fix": "ELSA-2026-35892",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35892",
      "released": "2026-07-08T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.1.module\u002Bel8.10.0\u002B24481\u002B7a71fac8",
      "fix": "RHSA-2026:39868",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-39868",
      "released": "2026-07-18T12:43:26Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.1.module\u002Bel9.8.0\u002B24456\u002Bb244c3b4",
      "fix": "RHSA-2026:35891",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-35891",
      "released": "2026-07-07T15:30:54Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.1.module_el8.10.0\u002B4228\u002B2938bc94",
      "fix": "ALSA-2026:39868",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-39868",
      "released": "2026-07-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.1.module_el9.8.0\u002B277\u002B61fc613e",
      "fix": "ALSA-2026:35891",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-35891",
      "released": "2026-07-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "ol 8",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.1.module\u002Bel8.10.0\u002B90961\u002Ba86f8457",
      "fix": "ELSA-2026-39868",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-39868",
      "released": "2026-07-20T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "ol 9",
      "fixedVersion": "3:13.6.233.17-1.24.18.0.1.module\u002Bel9.8.0\u002B90946\u002B13dc792a",
      "fix": "ELSA-2026-35891",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-35891",
      "released": "2026-07-07T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}