# CVE-2026-69152: nodejs-nodemon: The brace-expansion library generates arbitrary strings containing a common prefix and suffix

CVE-2026-69152 is fixed in 35 products on 1 platform, first by ALSA-2026:52841, released August 10, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-69152
- Priority: High
- CVSS: 8.6 (important)
- EPSS: 0.0065
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Aug 3, 2026

## Description

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | 389-ds-base Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-debuginfo Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-debugsource Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-devel Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-libs Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-libs-debuginfo Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-robdb-libs Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-robdb-libs-debuginfo Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-snmp Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | 389-ds-base-snmp-debuginfo Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | cockpit-389-ds Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | nodejs RHEL 8 | 1:22.23.1-3.module+el8.10.0+24640+6eba5e6e | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | nodejs RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs almalinux 10 | 1:22.23.1-6.el10_2 | [ALSA-2026:55541](https://patchblox.com/security/data/fix/linux/alsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs almalinux 8 | 1:22.23.1-3.module_el8.10.0+4251+b427b8a5 | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | nodejs almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs ol 10 | 1:22.23.1-6.0.1.el10_2 | [ELSA-2026-55541](https://patchblox.com/security/data/fix/linux/elsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs ol 9 | 1:22.23.1-3.module+el9.8.0+90991+73acc950 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | nodejs rocky 8 | 1:22.23.1-3.module+el8.10.0+40278+50b003a3 | [RLSA-2026:54530](https://patchblox.com/security/data/fix/linux/rlsa-2026-54530.md) | Aug 25, 2026 |
| Linux | nodejs rocky 9 | 1:24.18.0-6.module+el9.8.0+40281+14cc6568 | [RLSA-2026:55603](https://patchblox.com/security/data/fix/linux/rlsa-2026-55603.md) | Aug 25, 2026 |
| Linux | nodejs-devel RHEL 8 | 1:22.23.1-3.module+el8.10.0+24640+6eba5e6e | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | nodejs-devel RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-devel almalinux 10 | 1:22.23.1-6.el10_2 | [ALSA-2026:55541](https://patchblox.com/security/data/fix/linux/alsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-devel almalinux 8 | 1:22.23.1-3.module_el8.10.0+4251+b427b8a5 | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | nodejs-devel almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-devel ol 10 | 1:22.23.1-6.0.1.el10_2 | [ELSA-2026-55541](https://patchblox.com/security/data/fix/linux/elsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-devel ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-devel ol 9 | 1:22.23.1-3.module+el9.8.0+90991+73acc950 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | nodejs-docs RHEL 8 | 1:22.23.1-3.module+el8.10.0+24640+6eba5e6e | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | nodejs-docs RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-docs almalinux 10 | 1:22.23.1-6.el10_2 | [ALSA-2026:55541](https://patchblox.com/security/data/fix/linux/alsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-docs almalinux 8 | 1:22.23.1-3.module_el8.10.0+4251+b427b8a5 | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | nodejs-docs almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-docs ol 10 | 1:22.23.1-6.0.1.el10_2 | [ELSA-2026-55541](https://patchblox.com/security/data/fix/linux/elsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-docs ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-docs ol 9 | 1:22.23.1-3.module+el9.8.0+90991+73acc950 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | nodejs-full-i18n RHEL 8 | 1:22.23.1-3.module+el8.10.0+24640+6eba5e6e | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | nodejs-full-i18n RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-full-i18n almalinux 10 | 1:22.23.1-6.el10_2 | [ALSA-2026:55541](https://patchblox.com/security/data/fix/linux/alsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-full-i18n almalinux 8 | 1:22.23.1-3.module_el8.10.0+4251+b427b8a5 | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | nodejs-full-i18n almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-full-i18n ol 10 | 1:22.23.1-6.0.1.el10_2 | [ELSA-2026-55541](https://patchblox.com/security/data/fix/linux/elsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-full-i18n ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-full-i18n ol 9 | 1:22.23.1-3.module+el9.8.0+90991+73acc950 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | nodejs-libs RHEL 8 | 1:22.23.1-3.module+el8.10.0+24640+6eba5e6e | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | nodejs-libs RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-libs almalinux 10 | 1:22.23.1-6.el10_2 | [ALSA-2026:55541](https://patchblox.com/security/data/fix/linux/alsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-libs almalinux 8 | 1:22.23.1-3.module_el8.10.0+4251+b427b8a5 | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | nodejs-libs almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-libs ol 10 | 1:22.23.1-6.0.1.el10_2 | [ELSA-2026-55541](https://patchblox.com/security/data/fix/linux/elsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-libs ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-libs ol 9 | 1:22.23.1-3.module+el9.8.0+90991+73acc950 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | nodejs-nodemon RHEL 10 | 3.1.14-3.el10_0 | [RHSA-2026:61374](https://patchblox.com/security/data/fix/linux/rhsa-2026-61374.md) | Aug 11, 2026 |
| Linux | nodejs-nodemon RHEL 8 | 0:3.1.14-2.module+el8.10.0+24640+6eba5e6e | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | nodejs-nodemon RHEL 9 | 0:3.1.14-3.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-nodemon almalinux 10 | 3.1.14-3.el10_2 | [ALSA-2026:52841](https://patchblox.com/security/data/fix/linux/alsa-2026-52841.md) | Aug 10, 2026 |
| Linux | nodejs-nodemon almalinux 8 | 3.1.14-2.module_el8.10.0+4252+aedd4c30 | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | nodejs-nodemon almalinux 9 | 3.1.14-3.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-nodemon ol 10 | 0:3.1.14-3.el10_2 | [ELSA-2026-52841](https://patchblox.com/security/data/fix/linux/elsa-2026-52841.md) | Aug 10, 2026 |
| Linux | nodejs-nodemon ol 8 | 0:3.1.14-2.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-nodemon ol 9 | 0:3.1.14-2.module+el9.8.0+90991+73acc950 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | nodejs-nodemon rocky 10 | 0:3.1.14-3.el10_2 | [RLSA-2026:52841](https://patchblox.com/security/data/fix/linux/rlsa-2026-52841.md) | Aug 11, 2026 |
| Linux | nodejs-nodemon rocky 8 | 0:3.1.14-2.module+el8.10.0+40277+b1b3f89e | [RLSA-2026:54530](https://patchblox.com/security/data/fix/linux/rlsa-2026-54530.md) | Aug 25, 2026 |
| Linux | nodejs-nodemon rocky 9 | 0:3.1.14-3.module+el9.8.0+40281+14cc6568 | [RLSA-2026:55603](https://patchblox.com/security/data/fix/linux/rlsa-2026-55603.md) | Aug 25, 2026 |
| Linux | nodejs-npm almalinux 10 | 1:10.9.8-1.22.23.1.6.el10_2 | [ALSA-2026:55541](https://patchblox.com/security/data/fix/linux/alsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-npm ol 10 | 1:10.9.8-1.22.23.1.6.0.1.el10_2 | [ELSA-2026-55541](https://patchblox.com/security/data/fix/linux/elsa-2026-55541.md) | Aug 17, 2026 |
| Linux | nodejs-packaging RHEL 8 | 0:2021.06-6.module+el8.10.0+24500+8eb51621 | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | nodejs-packaging RHEL 9 | 0:2021.06-6.module+el9.8.0+24355+35d95b59 | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-packaging almalinux 8 | 2021.06-6.module_el8.10.0+4158+e796f37f | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | nodejs-packaging almalinux 9 | 2021.06-6.module_el9.7.0+209+ecf6523e | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-packaging ol 8 | 0:2021.06-6.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-packaging ol 9 | 0:2021.06-6.module+el9.8.0+90973+e42b55e7 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | nodejs-packaging rocky 8 | 0:2021.06-6.module+el8.10.0+40172+38f6fdd1 | [RLSA-2026:54530](https://patchblox.com/security/data/fix/linux/rlsa-2026-54530.md) | Aug 25, 2026 |
| Linux | nodejs-packaging rocky 9 | 0:2021.06-6.module+el9.7.0+40165+d075e3f2 | [RLSA-2026:55603](https://patchblox.com/security/data/fix/linux/rlsa-2026-55603.md) | Aug 25, 2026 |
| Linux | nodejs-packaging-bundler RHEL 8 | 0:2021.06-6.module+el8.10.0+24500+8eb51621 | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | nodejs-packaging-bundler RHEL 9 | 0:2021.06-6.module+el9.8.0+24355+35d95b59 | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | nodejs-packaging-bundler almalinux 8 | 2021.06-6.module_el8.10.0+4158+e796f37f | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | nodejs-packaging-bundler almalinux 9 | 2021.06-6.module_el9.7.0+209+ecf6523e | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | nodejs-packaging-bundler ol 8 | 0:2021.06-6.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | nodejs-packaging-bundler ol 9 | 0:2021.06-6.module+el9.8.0+90973+e42b55e7 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | nodejs22 RHEL 10 | 22.23.2-1.el10_0 | [RHSA-2026:64817](https://patchblox.com/security/data/fix/linux/rhsa-2026-64817.md) | Aug 17, 2026 |
| Linux | nodejs22 rocky 10 | 1:22.23.1-6.el10_2 | [RLSA-2026:55541](https://patchblox.com/security/data/fix/linux/rlsa-2026-55541.md) | Aug 18, 2026 |
| Linux | nodejs24 RHEL 10 | 24.18.0-5.el10_2 | [RHSA-2026:58819](https://patchblox.com/security/data/fix/linux/rhsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24 almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24 amzn 2023 | 1:24.22.0-1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24 ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24 rocky 10 | 1:24.18.0-5.el10_2 | [RLSA-2026:58819](https://patchblox.com/security/data/fix/linux/rlsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-debuginfo amzn 2023 | 1:24.22.0-1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24-debugsource amzn 2023 | 1:24.22.0-1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24-devel almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-devel amzn 2023 | 1:24.22.0-1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24-devel ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-docs almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-docs amzn 2023 | 1:24.22.0-1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24-docs ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-full-i18n almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-full-i18n amzn 2023 | 1:24.22.0-1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24-full-i18n ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-libs almalinux 10 | 1:24.18.0-5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-libs amzn 2023 | 1:24.22.0-1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24-libs ol 10 | 1:24.18.0-5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | nodejs24-libs-debuginfo amzn 2023 | 1:24.22.0-1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24-npm almalinux 10 | 1:11.16.0-1.24.18.0.5.el10_2 | [ALSA-2026:58819](https://patchblox.com/security/data/fix/linux/alsa-2026-58819.md) | Aug 24, 2026 |
| Linux | nodejs24-npm amzn 2023 | 1:11.19.1-1.24.22.0.1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | nodejs24-npm ol 10 | 1:11.16.0-1.24.18.0.5.0.1.el10_2 | [ELSA-2026-58819](https://patchblox.com/security/data/fix/linux/elsa-2026-58819.md) | Aug 25, 2026 |
| Linux | npm RHEL 8 | 1:10.9.8-1.22.23.1.3.module+el8.10.0+24640+6eba5e6e | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | npm RHEL 9 | 1:11.16.0-1.24.18.0.6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | npm almalinux 8 | 1:10.9.8-1.22.23.1.3.module_el8.10.0+4251+b427b8a5 | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | npm almalinux 9 | 1:11.16.0-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | npm ol 8 | 1:11.16.0-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | npm ol 9 | 1:10.9.8-1.22.23.1.3.module+el9.8.0+90991+73acc950 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | python3-lib389 Fedora 43 | 3.1.5-4.fc43 | [FEDORA-2026-0B8BC362B1](https://patchblox.com/security/data/fix/linux/fedora-2026-0b8bc362b1.md) | Sep 7, 2026 |
| Linux | rh-podman-desktop RHEL 10 | 1.1.2-1.el10_2 | [RHSA-2026:57590](https://patchblox.com/security/data/fix/linux/rhsa-2026-57590.md) | Aug 21, 2026 |
| Linux | v8-12.4-devel RHEL 8 | 3:12.4.254.21-1.22.23.1.3.module+el8.10.0+24640+6eba5e6e | [RHSA-2026:54530](https://patchblox.com/security/data/fix/linux/rhsa-2026-54530.md) | Aug 28, 2026 |
| Linux | v8-12.4-devel RHEL 9 | 3:12.4.254.21-1.22.23.1.3.module+el9.8.0+24637+e0b636e5 | [RHSA-2026:55601](https://patchblox.com/security/data/fix/linux/rhsa-2026-55601.md) | Aug 28, 2026 |
| Linux | v8-12.4-devel almalinux 8 | 3:12.4.254.21-1.22.23.1.3.module_el8.10.0+4251+b427b8a5 | [ALSA-2026:54530](https://patchblox.com/security/data/fix/linux/alsa-2026-54530.md) | Aug 13, 2026 |
| Linux | v8-12.4-devel almalinux 9 | 3:12.4.254.21-1.22.23.1.3.module_el9.8.0+291+0bb98cce | [ALSA-2026:55601](https://patchblox.com/security/data/fix/linux/alsa-2026-55601.md) | Aug 17, 2026 |
| Linux | v8-12.4-devel ol 8 | 3:12.4.254.21-1.22.23.1.3.module+el8.10.0+90989+141244df | [ELSA-2026-54530](https://patchblox.com/security/data/fix/linux/elsa-2026-54530.md) | Aug 14, 2026 |
| Linux | v8-12.4-devel ol 9 | 3:12.4.254.21-1.22.23.1.3.module+el9.8.0+90991+73acc950 | [ELSA-2026-55601](https://patchblox.com/security/data/fix/linux/elsa-2026-55601.md) | Aug 18, 2026 |
| Linux | v8-13.6-devel RHEL 8 | 3:13.6.233.17-1.24.18.0.3.module+el8.10.0+24639+56878497 | [RHSA-2026:54371](https://patchblox.com/security/data/fix/linux/rhsa-2026-54371.md) | Aug 28, 2026 |
| Linux | v8-13.6-devel RHEL 9 | 3:13.6.233.17-1.24.18.0.6.module+el9.8.0+24638+75f46aee | [RHSA-2026:55603](https://patchblox.com/security/data/fix/linux/rhsa-2026-55603.md) | Aug 28, 2026 |
| Linux | v8-13.6-devel almalinux 8 | 3:13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4 | [ALSA-2026:54371](https://patchblox.com/security/data/fix/linux/alsa-2026-54371.md) | Aug 12, 2026 |
| Linux | v8-13.6-devel almalinux 9 | 3:13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2 | [ALSA-2026:55603](https://patchblox.com/security/data/fix/linux/alsa-2026-55603.md) | Aug 17, 2026 |
| Linux | v8-13.6-devel amzn 2023 | 3:13.6.233.17-1.24.22.0.1.amzn2023.0.1 | [ALAS2023-2026-3297](https://patchblox.com/security/data/fix/linux/alas2023-2026-3297.md) | Nov 7, 2026 |
| Linux | v8-13.6-devel ol 8 | 3:13.6.233.17-1.24.18.0.3.module+el8.10.0+90988+ddbb43dc | [ELSA-2026-54371](https://patchblox.com/security/data/fix/linux/elsa-2026-54371.md) | Aug 14, 2026 |
| Linux | v8-13.6-devel ol 9 | 3:13.6.233.17-1.24.18.0.6.module+el9.8.0+90993+075b4fd6 | [ELSA-2026-55603](https://patchblox.com/security/data/fix/linux/elsa-2026-55603.md) | Aug 18, 2026 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.