{
  "cveId": "CVE-2026-58040",
  "url": "https://patchblox.com/security/cve/CVE-2026-58040",
  "summary": "CVE-2026-58040 is fixed in 34 products on 2 platforms, first by Node.js 26.5.1, released July 28, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Node.js and 2 others: Improper Validation of Certificate with Host Mismatch",
  "description": "An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934).\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",
  "published": "2026-07-30T06:02:49Z",
  "severity": "Important",
  "cvss": 6.3,
  "cvssVector": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
  "cwe": "CWE-297: Improper Validation of Certificate with Host Mismatch",
  "epss": 0.00278,
  "epssPercentile": 0.20309,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2026-58040",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Node.js",
      "fixedVersion": "26.5.1",
      "fix": "Node.js 26.5.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs-26.5.1",
      "released": "2026-07-28T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js (LTS)",
      "fixedVersion": "24.18.1",
      "fix": "Node.js (LTS) 24.18.1",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.lts-24.18.1",
      "released": "2026-07-28T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Node.js 22",
      "fixedVersion": "22.23.2",
      "fix": "Node.js 22 22.23.2",
      "url": "https://patchblox.com/security/fix/windows-app/openjs.nodejs.22-22.23.2",
      "released": "2026-07-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "18.20.4\u002Bdfsg-1~deb12u3",
      "fix": "DEBIAN-CVE-2026-58040",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-58040",
      "released": "2026-08-15T22:38:55Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "Debian 14",
      "fixedVersion": "24.19.0\u002Bdfsg\u002B~cs24.13.3-1",
      "fix": "DEBIAN-CVE-2026-58040",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-58040",
      "released": "2026-08-15T22:38:55Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 8",
      "fixedVersion": "1:24.19.0-1.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.19.0-1.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.2-1.el10_2",
      "fix": "ALSA-2026:61376",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61376",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 8",
      "fixedVersion": "1:24.19.0-1.module_el8.10.0\u002B4268\u002B8e07aa5a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.19.0-1.module_el9.8.0\u002B301\u002B084fac05",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 8",
      "fixedVersion": "1:24.19.0-1.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "RHEL 9",
      "fixedVersion": "1:24.19.0-1.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.2-1.el10_2",
      "fix": "ALSA-2026:61376",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61376",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 8",
      "fixedVersion": "1:24.19.0-1.module_el8.10.0\u002B4268\u002B8e07aa5a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-devel",
      "release": "almalinux 9",
      "fixedVersion": "1:24.19.0-1.module_el9.8.0\u002B301\u002B084fac05",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 8",
      "fixedVersion": "1:24.19.0-1.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.19.0-1.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.2-1.el10_2",
      "fix": "ALSA-2026:61376",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61376",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 8",
      "fixedVersion": "1:24.19.0-1.module_el8.10.0\u002B4268\u002B8e07aa5a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-docs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.19.0-1.module_el9.8.0\u002B301\u002B084fac05",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 8",
      "fixedVersion": "1:24.19.0-1.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "RHEL 9",
      "fixedVersion": "1:24.19.0-1.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.2-1.el10_2",
      "fix": "ALSA-2026:61376",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61376",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 8",
      "fixedVersion": "1:24.19.0-1.module_el8.10.0\u002B4268\u002B8e07aa5a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-full-i18n",
      "release": "almalinux 9",
      "fixedVersion": "1:24.19.0-1.module_el9.8.0\u002B301\u002B084fac05",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 8",
      "fixedVersion": "1:24.19.0-1.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "RHEL 9",
      "fixedVersion": "1:24.19.0-1.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 10",
      "fixedVersion": "1:22.23.2-1.el10_2",
      "fix": "ALSA-2026:61376",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61376",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 8",
      "fixedVersion": "1:24.19.0-1.module_el8.10.0\u002B4268\u002B8e07aa5a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-libs",
      "release": "almalinux 9",
      "fixedVersion": "1:24.19.0-1.module_el9.8.0\u002B301\u002B084fac05",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 8",
      "fixedVersion": "0:3.1.14-2.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "RHEL 9",
      "fixedVersion": "0:3.1.14-3.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 8",
      "fixedVersion": "3.1.14-2.module_el8.10.0\u002B4250\u002B09238ed4",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-nodemon",
      "release": "almalinux 9",
      "fixedVersion": "3.1.14-3.module_el9.8.0\u002B292\u002Bf4eaf8b2",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:10.9.8-1.22.23.2.1.el10_2",
      "fix": "ALSA-2026:61376",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61376",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4086\u002B70facd4a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B209\u002Becf6523e",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 8",
      "fixedVersion": "0:2021.06-6.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "RHEL 9",
      "fixedVersion": "0:2021.06-6.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 8",
      "fixedVersion": "2021.06-6.module_el8.10.0\u002B4086\u002B70facd4a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs-packaging-bundler",
      "release": "almalinux 9",
      "fixedVersion": "2021.06-6.module_el9.7.0\u002B209\u002Becf6523e",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs20",
      "release": "sles 15.6",
      "fixedVersion": "20.20.2-150600.3.21.1",
      "fix": "SUSE-SU-2026:3929-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3929-1",
      "released": "2026-09-03T07:18:06Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "RHEL 10",
      "fixedVersion": "22.23.2-1.el10_0",
      "fix": "RHSA-2026:64817",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-64817",
      "released": "2026-08-17T23:00:29Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "amzn 2023",
      "fixedVersion": "1:22.23.2-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "22.23.2-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21545-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21545-1",
      "released": "2026-08-10T09:02:01Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 15.6",
      "fixedVersion": "22.23.2-150600.13.24.1",
      "fix": "SUSE-SU-2026:3521-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3521-1",
      "released": "2026-08-06T11:31:28Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 15.7",
      "fixedVersion": "22.23.2-150700.3.18.1",
      "fix": "SUSE-SU-2026:3557-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3557-1",
      "released": "2026-08-10T17:59:21Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22",
      "release": "sles 16.0",
      "fixedVersion": "22.23.2-160000.1.1",
      "fix": "SUSE-SU-2026:23154-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23154-1",
      "released": "2026-08-10T08:26:03Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:22.23.2-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:22.23.2-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:22.23.2-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:22.23.2-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:22.23.2-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:22.23.2-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:22.23.2-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs22-npm",
      "release": "amzn 2023",
      "fixedVersion": "1:10.9.8-1.22.23.2.1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "RHEL 10",
      "fixedVersion": "24.19.0-1.el10_2",
      "fix": "RHSA-2026:61377",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61377",
      "released": "2026-09-02T01:28:12Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "almalinux 10",
      "fixedVersion": "1:24.19.0-1.el10_2",
      "fix": "ALSA-2026:61377",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61377",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "amzn 2023",
      "fixedVersion": "1:24.18.1-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "24.18.1-160000.1.1",
      "fix": "OPENSUSE-SU-2026:21546-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21546-1",
      "released": "2026-08-10T09:28:21Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "sles 15.7",
      "fixedVersion": "24.18.1-150700.15.16.1",
      "fix": "SUSE-SU-2026:3520-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3520-1",
      "released": "2026-08-06T11:31:16Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24",
      "release": "sles 16.0",
      "fixedVersion": "24.18.1-160000.1.1",
      "fix": "SUSE-SU-2026:23155-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23155-1",
      "released": "2026-08-10T08:46:10Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:24.18.1-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "1:24.18.1-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "almalinux 10",
      "fixedVersion": "1:24.19.0-1.el10_2",
      "fix": "ALSA-2026:61377",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61377",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:24.18.1-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "almalinux 10",
      "fixedVersion": "1:24.19.0-1.el10_2",
      "fix": "ALSA-2026:61377",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61377",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-docs",
      "release": "amzn 2023",
      "fixedVersion": "1:24.18.1-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "almalinux 10",
      "fixedVersion": "1:24.19.0-1.el10_2",
      "fix": "ALSA-2026:61377",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61377",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-full-i18n",
      "release": "amzn 2023",
      "fixedVersion": "1:24.18.1-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "almalinux 10",
      "fixedVersion": "1:24.19.0-1.el10_2",
      "fix": "ALSA-2026:61377",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61377",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs",
      "release": "amzn 2023",
      "fixedVersion": "1:24.18.1-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:24.18.1-1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "almalinux 10",
      "fixedVersion": "1:11.17.0-1.24.19.0.1.el10_2",
      "fix": "ALSA-2026:61377",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61377",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "nodejs24-npm",
      "release": "amzn 2023",
      "fixedVersion": "1:11.16.0-1.24.18.1.1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 8",
      "fixedVersion": "1:11.17.0-1.24.19.0.1.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "RHEL 9",
      "fixedVersion": "1:11.17.0-1.24.19.0.1.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 8",
      "fixedVersion": "1:11.17.0-1.24.19.0.1.module_el8.10.0\u002B4268\u002B8e07aa5a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "npm",
      "release": "almalinux 9",
      "fixedVersion": "1:11.17.0-1.24.19.0.1.module_el9.8.0\u002B301\u002B084fac05",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:12.4.254.21-1.22.23.2.1.module\u002Bel8.10.0\u002B24710\u002Bc2e9b41f",
      "fix": "RHSA-2026:62219",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62219",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:12.4.254.21-1.22.23.2.1.module\u002Bel9.8.0\u002B24709\u002B804d6b5b",
      "fix": "RHSA-2026:61383",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61383",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:12.4.254.21-1.22.23.2.1.module_el8.10.0\u002B4265\u002B75d28086",
      "fix": "ALSA-2026:62219",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62219",
      "released": "2026-09-01T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:12.4.254.21-1.22.23.2.1.module_el9.8.0\u002B302\u002B959ebcd4",
      "fix": "ALSA-2026:61383",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61383",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-12.4-devel",
      "release": "amzn 2023",
      "fixedVersion": "3:12.4.254.21-1.22.23.2.1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2060",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2060",
      "released": "2026-08-17T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:13.6.233.17-1.24.19.0.1.module\u002Bel8.10.0\u002B24711\u002Bb610b202",
      "fix": "RHSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-62583",
      "released": "2026-09-13T12:46:35Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "RHEL 9",
      "fixedVersion": "3:13.6.233.17-1.24.19.0.1.module\u002Bel9.8.0\u002B24708\u002Be71d2e1d",
      "fix": "RHSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2026-61386",
      "released": "2026-09-13T12:47:53Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:13.6.233.17-1.24.19.0.1.module_el8.10.0\u002B4268\u002B8e07aa5a",
      "fix": "ALSA-2026:62583",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-62583",
      "released": "2026-09-02T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "almalinux 9",
      "fixedVersion": "3:13.6.233.17-1.24.19.0.1.module_el9.8.0\u002B301\u002B084fac05",
      "fix": "ALSA-2026:61386",
      "url": "https://patchblox.com/security/fix/linux/alsa-2026-61386",
      "released": "2026-08-31T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "v8-13.6-devel",
      "release": "amzn 2023",
      "fixedVersion": "3:13.6.233.17-1.24.18.1.1.amzn2023.0.2",
      "fix": "ALAS2023-2026-2059",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2059",
      "released": "2026-08-17T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}