# CVE-2026-9496: npm: Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGit...

CVE-2026-9496 is fixed in 31 products on 1 platform, first by DEBIAN-CVE-2026-9496, released May 26, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-9496
- Priority: High
- CVSS: 7.5 (Important)
- EPSS: 0.0035
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: May 26, 2026

## Description

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation logic,  causing excessive CPU consumption and potentially stalling or crashing the process.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | nodejs RHEL 8 | 1:22.23.2-2.module+el8.10.0+24957+74108fbf | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | nodejs RHEL 9 | 1:22.23.2-2.module+el9.8.0+24958+80b2ac6e | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | nodejs almalinux 10 | 1:22.23.2-3.el10_2 | [ALSA-2026:75864](https://patchblox.com/security/data/fix/linux/alsa-2026-75864.md) | Oct 5, 2026 |
| Linux | nodejs almalinux 8 | 1:22.23.2-2.module_el8.10.0+4296+737cb4d7 | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | nodejs almalinux 9 | 1:22.23.2-2.module_el9.8.0+322+f4aa738c | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | nodejs ol 10 | 1:22.23.2-3.0.1.el10_2 | [ELSA-2026-75864](https://patchblox.com/security/data/fix/linux/elsa-2026-75864.md) | Oct 6, 2026 |
| Linux | nodejs ol 8 | 1:22.23.2-2.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | nodejs ol 9 | 1:22.23.2-2.module+el9.8.0+91062+a7d6b802 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs rocky 9 | 1:22.23.2-2.module+el9.8.0+40374+17512296 | [RLSA-2026:76750](https://patchblox.com/security/data/fix/linux/rlsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-devel RHEL 8 | 1:22.23.2-2.module+el8.10.0+24957+74108fbf | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | nodejs-devel RHEL 9 | 1:22.23.2-2.module+el9.8.0+24958+80b2ac6e | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | nodejs-devel almalinux 10 | 1:22.23.2-3.el10_2 | [ALSA-2026:75864](https://patchblox.com/security/data/fix/linux/alsa-2026-75864.md) | Oct 5, 2026 |
| Linux | nodejs-devel almalinux 8 | 1:22.23.2-2.module_el8.10.0+4296+737cb4d7 | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | nodejs-devel almalinux 9 | 1:22.23.2-2.module_el9.8.0+322+f4aa738c | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | nodejs-devel ol 10 | 1:22.23.2-3.0.1.el10_2 | [ELSA-2026-75864](https://patchblox.com/security/data/fix/linux/elsa-2026-75864.md) | Oct 6, 2026 |
| Linux | nodejs-devel ol 8 | 1:22.23.2-2.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | nodejs-devel ol 9 | 1:22.23.2-2.module+el9.8.0+91062+a7d6b802 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-docs RHEL 8 | 1:22.23.2-2.module+el8.10.0+24957+74108fbf | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | nodejs-docs RHEL 9 | 1:22.23.2-2.module+el9.8.0+24958+80b2ac6e | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | nodejs-docs almalinux 10 | 1:22.23.2-3.el10_2 | [ALSA-2026:75864](https://patchblox.com/security/data/fix/linux/alsa-2026-75864.md) | Oct 5, 2026 |
| Linux | nodejs-docs almalinux 8 | 1:22.23.2-2.module_el8.10.0+4296+737cb4d7 | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | nodejs-docs almalinux 9 | 1:22.23.2-2.module_el9.8.0+322+f4aa738c | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | nodejs-docs ol 10 | 1:22.23.2-3.0.1.el10_2 | [ELSA-2026-75864](https://patchblox.com/security/data/fix/linux/elsa-2026-75864.md) | Oct 6, 2026 |
| Linux | nodejs-docs ol 8 | 1:22.23.2-2.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | nodejs-docs ol 9 | 1:22.23.2-2.module+el9.8.0+91062+a7d6b802 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-full-i18n RHEL 8 | 1:22.23.2-2.module+el8.10.0+24957+74108fbf | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | nodejs-full-i18n RHEL 9 | 1:22.23.2-2.module+el9.8.0+24958+80b2ac6e | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | nodejs-full-i18n almalinux 10 | 1:22.23.2-3.el10_2 | [ALSA-2026:75864](https://patchblox.com/security/data/fix/linux/alsa-2026-75864.md) | Oct 5, 2026 |
| Linux | nodejs-full-i18n almalinux 8 | 1:22.23.2-2.module_el8.10.0+4296+737cb4d7 | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | nodejs-full-i18n almalinux 9 | 1:22.23.2-2.module_el9.8.0+322+f4aa738c | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | nodejs-full-i18n ol 10 | 1:22.23.2-3.0.1.el10_2 | [ELSA-2026-75864](https://patchblox.com/security/data/fix/linux/elsa-2026-75864.md) | Oct 6, 2026 |
| Linux | nodejs-full-i18n ol 8 | 1:22.23.2-2.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | nodejs-full-i18n ol 9 | 1:22.23.2-2.module+el9.8.0+91062+a7d6b802 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-libs RHEL 8 | 1:22.23.2-2.module+el8.10.0+24957+74108fbf | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | nodejs-libs RHEL 9 | 1:22.23.2-2.module+el9.8.0+24958+80b2ac6e | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | nodejs-libs almalinux 10 | 1:22.23.2-3.el10_2 | [ALSA-2026:75864](https://patchblox.com/security/data/fix/linux/alsa-2026-75864.md) | Oct 5, 2026 |
| Linux | nodejs-libs almalinux 8 | 1:22.23.2-2.module_el8.10.0+4296+737cb4d7 | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | nodejs-libs almalinux 9 | 1:22.23.2-2.module_el9.8.0+322+f4aa738c | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | nodejs-libs ol 10 | 1:22.23.2-3.0.1.el10_2 | [ELSA-2026-75864](https://patchblox.com/security/data/fix/linux/elsa-2026-75864.md) | Oct 6, 2026 |
| Linux | nodejs-libs ol 8 | 1:22.23.2-2.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | nodejs-libs ol 9 | 1:22.23.2-2.module+el9.8.0+91062+a7d6b802 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-nodemon RHEL 8 | 0:3.1.14-2.module+el8.10.0+24710+c2e9b41f | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | nodejs-nodemon RHEL 9 | 0:3.1.14-2.module+el9.8.0+24709+804d6b5b | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | nodejs-nodemon almalinux 8 | 3.1.14-2.module_el8.10.0+4252+aedd4c30 | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | nodejs-nodemon almalinux 9 | 3.1.14-2.module_el9.8.0+302+959ebcd4 | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | nodejs-nodemon ol 8 | 0:3.1.14-2.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | nodejs-nodemon ol 9 | 0:3.1.14-2.module+el9.8.0+91010+e0f4f255 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-nodemon rocky 8 | 0:3.1.14-2.module+el8.10.0+40277+b1b3f89e | [RLSA-2026:75870](https://patchblox.com/security/data/fix/linux/rlsa-2026-75870.md) | Oct 6, 2026 |
| Linux | nodejs-nodemon rocky 9 | 0:3.1.14-2.module+el9.8.0+40280+057606e8 | [RLSA-2026:76750](https://patchblox.com/security/data/fix/linux/rlsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-npm almalinux 10 | 1:10.9.8-1.22.23.2.3.el10_2 | [ALSA-2026:75864](https://patchblox.com/security/data/fix/linux/alsa-2026-75864.md) | Oct 5, 2026 |
| Linux | nodejs-npm ol 10 | 1:10.9.8-1.22.23.2.3.0.1.el10_2 | [ELSA-2026-75864](https://patchblox.com/security/data/fix/linux/elsa-2026-75864.md) | Oct 6, 2026 |
| Linux | nodejs-packaging RHEL 8 | 0:2021.06-6.module+el8.10.0+24710+c2e9b41f | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | nodejs-packaging RHEL 9 | 0:2021.06-6.module+el9.8.0+24709+804d6b5b | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | nodejs-packaging almalinux 8 | 2021.06-6.module_el8.10.0+4158+e796f37f | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | nodejs-packaging almalinux 9 | 2021.06-6.module_el9.7.0+227+12323393 | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | nodejs-packaging ol 8 | 0:2021.06-4.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | nodejs-packaging ol 9 | 0:2021.06-6.module+el9.8.0+91010+e0f4f255 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-packaging rocky 8 | 0:2021.06-6.module+el8.10.0+40171+8fa9c325 | [RLSA-2026:75870](https://patchblox.com/security/data/fix/linux/rlsa-2026-75870.md) | Oct 6, 2026 |
| Linux | nodejs-packaging rocky 9 | 0:2021.06-6.module+el9.7.0+40052+e32ea525 | [RLSA-2026:76750](https://patchblox.com/security/data/fix/linux/rlsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs-packaging-bundler RHEL 8 | 0:2021.06-6.module+el8.10.0+24710+c2e9b41f | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | nodejs-packaging-bundler RHEL 9 | 0:2021.06-6.module+el9.8.0+24709+804d6b5b | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | nodejs-packaging-bundler almalinux 8 | 2021.06-6.module_el8.10.0+4158+e796f37f | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | nodejs-packaging-bundler almalinux 9 | 2021.06-6.module_el9.7.0+227+12323393 | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | nodejs-packaging-bundler ol 8 | 0:2021.06-4.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | nodejs-packaging-bundler ol 9 | 0:2021.06-6.module+el9.8.0+91010+e0f4f255 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | nodejs20 sles 15.6 | 20.20.2-150600.3.21.1 | [SUSE-SU-2026:3929-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3929-1.md) | Sep 3, 2026 |
| Linux | nodejs22 RHEL 10 | 22.23.2-2.el10_0 | [RHSA-2026:84703](https://patchblox.com/security/data/fix/linux/rhsa-2026-84703.md) | Sep 4, 2026 |
| Linux | nodejs22 amzn 2023 | 1:22.23.2-1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs22 opensuse-leap 16.0 | 22.23.0-160000.1.1 | [OPENSUSE-SU-2026:21058-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21058-1.md) | Jun 25, 2026 |
| Linux | nodejs22 rocky 10 | 1:22.23.2-3.el10_2 | [RLSA-2026:75864](https://patchblox.com/security/data/fix/linux/rlsa-2026-75864.md) | Oct 6, 2026 |
| Linux | nodejs22 sles 15.6 | 22.23.0-150600.13.18.1 | [SUSE-SU-2026:2647-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2647-1.md) | Jun 26, 2026 |
| Linux | nodejs22 sles 15.7 | 22.23.0-150700.3.12.1 | [SUSE-SU-2026:2695-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2695-1.md) | Jun 30, 2026 |
| Linux | nodejs22 sles 16.0 | 22.23.0-160000.1.1 | [SUSE-SU-2026:22368-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22368-1.md) | Jun 25, 2026 |
| Linux | nodejs22-debuginfo amzn 2023 | 1:22.23.2-1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs22-debugsource amzn 2023 | 1:22.23.2-1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs22-devel amzn 2023 | 1:22.23.2-1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs22-docs amzn 2023 | 1:22.23.2-1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs22-full-i18n amzn 2023 | 1:22.23.2-1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs22-libs amzn 2023 | 1:22.23.2-1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs22-libs-debuginfo amzn 2023 | 1:22.23.2-1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs22-npm amzn 2023 | 1:10.9.8-1.22.23.2.1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | nodejs24 amzn 2023 | 1:24.20.0-1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | nodejs24 opensuse-leap 16.0 | 24.18.0-160000.1.1 | [OPENSUSE-SU-2026:21236-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21236-1.md) | Jul 6, 2026 |
| Linux | nodejs24 sles 15.7 | 24.17.0-150700.15.11.1 | [SUSE-SU-2026:2633-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2633-1.md) | Jun 25, 2026 |
| Linux | nodejs24 sles 16.0 | 24.18.0-160000.1.1 | [SUSE-SU-2026:22565-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22565-1.md) | Jul 6, 2026 |
| Linux | nodejs24-debuginfo amzn 2023 | 1:24.20.0-1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | nodejs24-debugsource amzn 2023 | 1:24.20.0-1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | nodejs24-devel amzn 2023 | 1:24.20.0-1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | nodejs24-docs amzn 2023 | 1:24.20.0-1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | nodejs24-full-i18n amzn 2023 | 1:24.20.0-1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | nodejs24-libs amzn 2023 | 1:24.20.0-1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | nodejs24-libs-debuginfo amzn 2023 | 1:24.20.0-1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | nodejs24-npm amzn 2023 | 1:11.19.0-1.24.20.0.1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |
| Linux | npm Debian 14 | 12.0.2+ds1-1 | [DEBIAN-CVE-2026-9496](https://patchblox.com/security/data/fix/linux/debian-cve-2026-9496.md) | May 26, 2026 |
| Linux | npm RHEL 8 | 1:10.9.8-1.22.23.2.2.module+el8.10.0+24957+74108fbf | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | npm RHEL 9 | 1:10.9.8-1.22.23.2.2.module+el9.8.0+24958+80b2ac6e | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | npm almalinux 8 | 1:10.9.8-1.22.23.2.2.module_el8.10.0+4296+737cb4d7 | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | npm almalinux 9 | 1:10.9.8-1.22.23.2.2.module_el9.8.0+322+f4aa738c | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | npm ol 8 | 1:10.9.8-1.22.23.2.2.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | npm ol 9 | 1:10.9.8-1.22.23.2.2.module+el9.8.0+91062+a7d6b802 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | v8-12.4-devel RHEL 8 | 3:12.4.254.21-1.22.23.2.2.module+el8.10.0+24957+74108fbf | [RHSA-2026:75870](https://patchblox.com/security/data/fix/linux/rhsa-2026-75870.md) | Oct 1, 2026 |
| Linux | v8-12.4-devel RHEL 9 | 3:12.4.254.21-1.22.23.2.2.module+el9.8.0+24958+80b2ac6e | [RHSA-2026:76750](https://patchblox.com/security/data/fix/linux/rhsa-2026-76750.md) | Sep 30, 2026 |
| Linux | v8-12.4-devel almalinux 8 | 3:12.4.254.21-1.22.23.2.2.module_el8.10.0+4296+737cb4d7 | [ALSA-2026:75870](https://patchblox.com/security/data/fix/linux/alsa-2026-75870.md) | Oct 5, 2026 |
| Linux | v8-12.4-devel almalinux 9 | 3:12.4.254.21-1.22.23.2.2.module_el9.8.0+322+f4aa738c | [ALSA-2026:76750](https://patchblox.com/security/data/fix/linux/alsa-2026-76750.md) | Oct 6, 2026 |
| Linux | v8-12.4-devel amzn 2023 | 3:12.4.254.21-1.22.23.2.1.amzn2023.0.2 | [ALAS2023-2026-2060](https://patchblox.com/security/data/fix/linux/alas2023-2026-2060.md) | Aug 17, 2026 |
| Linux | v8-12.4-devel ol 8 | 3:12.4.254.21-1.22.23.2.2.module+el8.10.0+91061+02523cc0 | [ELSA-2026-75870](https://patchblox.com/security/data/fix/linux/elsa-2026-75870.md) | Nov 7, 2026 |
| Linux | v8-12.4-devel ol 9 | 3:12.4.254.21-1.22.23.2.2.module+el9.8.0+91062+a7d6b802 | [ELSA-2026-76750](https://patchblox.com/security/data/fix/linux/elsa-2026-76750.md) | Nov 7, 2026 |
| Linux | v8-13.6-devel amzn 2023 | 3:13.6.233.17-1.24.20.0.1.amzn2023.0.1 | [ALAS2023-2026-2141](https://patchblox.com/security/data/fix/linux/alas2023-2026-2141.md) | Sep 14, 2026 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.