# CVE-2026-54272: node-ip-address: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

CVE-2026-54272 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2026-54272, released August 2, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-54272
- Priority: High
- CVSS: 8.6 (moderate)
- EPSS: 0.0040
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 27, 2026

## Description

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType() classifies an address by matching it against a table of known IPv6 special-use prefixes, returning Global unicast when nothing matches. That table had no entry for the IPv4-mapped range (::ffff:0:0/96), so every mapped address fell through to Global unicast; NAT64 addresses matched their own NAT64 … labels. The boolean checks isLoopback, isUnspecified, and isMulticast compared getType() against a fixed label and so returned false, while isLinkLocal and isULA checked only the native IPv6 ranges. The library already exposed isMapped4() and to4(), but did not apply them inside these checks, so a mapped or NAT64 address was never normalized to its embedded IPv4 address before classification. For IPv4-mapped addresses the host OS routes to the IPv4 stack, so the misclassification is reachable on any dual-stack host. For NAT64, the classification bypass is unconditional but end-to-end reachability additionally requires a NAT64/DNS64 gateway in the deployment network.This issue has been fixed in version 10.2.1.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | node-ip-address Debian 14 | 10.3.1-1 | [DEBIAN-CVE-2026-54272](https://patchblox.com/security/data/fix/linux/debian-cve-2026-54272.md) | Aug 2, 2026 |
| Linux | nodejs RHEL 8 | 1:24.18.0-3.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | nodejs RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs almalinux 8 | 1:24.18.0-3.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | nodejs almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs ol 9 | 1:24.18.0-6.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | nodejs rocky 8 | 1:24.18.0-3.module+el8.10.0+40277+b1b3f89e | [RLSA-2026:54371](https://patchblox.com/security/data/fix/linux/rlsa-2026-54371.md) | Aug 25, 2026 |
| Linux | nodejs rocky 9 | 1:24.18.0-6.module+el9.8.0+40281+14cc6568 | [RLSA-2026:55603](https://patchblox.com/security/data/fix/linux/rlsa-2026-55603.md) | Aug 25, 2026 |
| Linux | nodejs-devel RHEL 8 | 1:24.18.0-3.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | nodejs-devel RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-devel almalinux 8 | 1:24.18.0-3.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | nodejs-devel almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-devel ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-devel ol 9 | 1:24.18.0-6.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | nodejs-docs RHEL 8 | 1:24.18.0-3.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | nodejs-docs RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-docs almalinux 8 | 1:24.18.0-3.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | nodejs-docs almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-docs ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-docs ol 9 | 1:24.18.0-6.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | nodejs-full-i18n RHEL 8 | 1:24.18.0-3.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | nodejs-full-i18n RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-full-i18n almalinux 8 | 1:24.18.0-3.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | nodejs-full-i18n almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-full-i18n ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-full-i18n ol 9 | 1:24.18.0-6.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | nodejs-libs RHEL 8 | 1:24.18.0-3.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | nodejs-libs RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-libs almalinux 8 | 1:24.18.0-3.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | nodejs-libs almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-libs ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-libs ol 9 | 1:24.18.0-6.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | nodejs-nodemon RHEL 8 | 0:3.1.14-2.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | nodejs-nodemon RHEL 9 | 0:3.1.14-3.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-nodemon almalinux 8 | 3.1.14-2.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | nodejs-nodemon almalinux 9 | 3.1.14-3.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-nodemon ol 8 | 0:3.1.14-2.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-nodemon ol 9 | 0:3.1.14-3.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | nodejs-nodemon rocky 8 | 0:3.1.14-2.module+el8.10.0+40277+b1b3f89e | [RLSA-2026:54371](https://patchblox.com/security/data/fix/linux/rlsa-2026-54371.md) | Aug 25, 2026 |
| Linux | nodejs-nodemon rocky 9 | 0:3.1.14-3.module+el9.8.0+40281+14cc6568 | [RLSA-2026:55603](https://patchblox.com/security/data/fix/linux/rlsa-2026-55603.md) | Aug 25, 2026 |
| Linux | nodejs-packaging RHEL 8 | 0:2021.06-6.module+el8.10.0+24562+090c6525 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | nodejs-packaging RHEL 9 | 0:2021.06-6.module+el9.8.0+24355+35d95b59 | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-packaging almalinux 8 | 2021.06-6.module_el8.10.0+4086+70facd4a | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | nodejs-packaging almalinux 9 | 2021.06-6.module_el9.7.0+209+ecf6523e | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-packaging ol 8 | 0:2021.06-6.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-packaging ol 9 | 0:2021.06-6.module+el9.8.0+90946+13dc792a | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | nodejs-packaging rocky 8 | 0:2021.06-6.module+el8.10.0+40172+38f6fdd1 | [RLSA-2026:54371](https://patchblox.com/security/data/fix/linux/rlsa-2026-54371.md) | Aug 25, 2026 |
| Linux | nodejs-packaging rocky 9 | 0:2021.06-6.module+el9.7.0+40165+d075e3f2 | [RLSA-2026:55603](https://patchblox.com/security/data/fix/linux/rlsa-2026-55603.md) | Aug 25, 2026 |
| Linux | nodejs-packaging-bundler RHEL 8 | 0:2021.06-6.module+el8.10.0+24562+090c6525 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | nodejs-packaging-bundler RHEL 9 | 0:2021.06-6.module+el9.8.0+24355+35d95b59 | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-packaging-bundler almalinux 8 | 2021.06-6.module_el8.10.0+4086+70facd4a | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | nodejs-packaging-bundler almalinux 9 | 2021.06-6.module_el9.7.0+209+ecf6523e | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-packaging-bundler ol 8 | 0:2021.06-6.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-packaging-bundler ol 9 | 0:2021.06-6.module+el9.8.0+90946+13dc792a | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | nodejs20 sles 15.6 | 20.20.2-150600.3.21.1 | [SUSE-SU-2026:3929-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3929-1.md) | Sep 3, 2026 |
| Linux | nodejs22 opensuse-leap 16.0 | 22.23.2-160000.1.1 | [OPENSUSE-SU-2026:21545-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21545-1.md) | Aug 10, 2026 |
| Linux | nodejs22 sles 15.6 | 22.23.2-150600.13.24.1 | [SUSE-SU-2026:3521-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3521-1.md) | Aug 6, 2026 |
| Linux | nodejs22 sles 15.7 | 22.23.2-150700.3.18.1 | [SUSE-SU-2026:3557-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3557-1.md) | Aug 10, 2026 |
| Linux | nodejs22 sles 16.0 | 22.23.2-160000.1.1 | [SUSE-SU-2026:23154-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23154-1.md) | Aug 10, 2026 |
| Linux | nodejs24 RHEL 10 | 24.18.0-5.el10_2 | [RHSA-2026:58819](https://patchblox.com/security/data/fix/linux/rhsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24 almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24 ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24 opensuse-leap 16.0 | 24.18.1-160000.1.1 | [OPENSUSE-SU-2026:21546-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21546-1.md) | Aug 10, 2026 |
| Linux | nodejs24 rocky 10 | 1:24.18.0-5.el10_2 | [RLSA-2026:58819](https://patchblox.com/security/data/fix/linux/rlsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24 sles 15.7 | 24.18.1-150700.15.16.1 | [SUSE-SU-2026:3520-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3520-1.md) | Aug 6, 2026 |
| Linux | nodejs24 sles 16.0 | 24.18.1-160000.1.1 | [SUSE-SU-2026:23155-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23155-1.md) | Aug 10, 2026 |
| Linux | nodejs24-devel almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-devel ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-docs almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-docs ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-full-i18n almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-full-i18n ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-libs almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-libs ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-npm almalinux 10 | 1:11.16.0-1.24.18.0.5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-npm ol 10 | 1:11.16.0-1.24.18.0.5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | npm RHEL 8 | 1:11.16.0-1.24.18.0.3.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | npm RHEL 9 | 1:11.16.0-1.24.18.0.6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | npm almalinux 8 | 1:11.16.0-1.24.18.0.3.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | npm almalinux 9 | 1:11.16.0-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | npm ol 8 | 1:11.16.0-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | npm ol 9 | 1:11.16.0-1.24.18.0.6.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |
| Linux | v8-12.4-devel RHEL 9 | 3:12.4.254.21-1.22.23.1.3.module+el9.8.0+24637+e0b636e5 | [RHSA-2026:55601](https://patchblox.com/security/data/fix/linux/rhsa-2026-55601.md) | Aug 28, 2026 |
| Linux | v8-12.4-devel almalinux 9 | 3:12.4.254.21-1.22.23.1.3.module_el9.8.0+291+0bb98cce | [ALSA-2026:55601](https://patchblox.com/security/data/fix/linux/alsa-2026-55601.md) | Aug 17, 2026 |
| Linux | v8-13.6-devel RHEL 8 | 3:13.6.233.17-1.24.18.0.3.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | v8-13.6-devel RHEL 9 | 3:13.6.233.17-1.24.18.0.6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | v8-13.6-devel almalinux 8 | 3:13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | v8-13.6-devel almalinux 9 | 3:13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | v8-13.6-devel ol 8 | 3:13.6.233.17-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | v8-13.6-devel ol 9 | 3:13.6.233.17-1.24.18.0.6.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.