# ELSA-2024-2910: nodejs-libs security update

ELSA-2024-2910, released May 22, 2024, fixes 5 CVEs in nodejs-libs (version 1:16.20.2-8.0.1.el9_4). None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2024-2910
- Platform: Linux
- Released: May 22, 2024
- Priority: High (Closes CVE-2024-27983, high severity)
- CVEs: 5, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2024-2910.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [nodejs-libs](https://patchblox.com/security/data/product/linux/nodejs-libs.md) | ol 9 | 1:16.20.2-8.0.1.el9_4 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-27983](https://patchblox.com/security/data/cve/CVE-2024-27983.md) | High | Node.js 18 and 2 others: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 8.2 | 0.8721 |  |
| [CVE-2024-28182](https://patchblox.com/security/data/cve/CVE-2024-28182.md) | High | nodejs: Node.js is a software development platform for building fast and scalable network applications in the JavaScript prog... | 7.5 | 0.8199 |  |
| [CVE-2024-22025](https://patchblox.com/security/data/cve/CVE-2024-22025.md) | High | Node.js 18 and 2 others: Improper Resource Shutdown or Release | 7.5 | 0.0131 |  |
| [CVE-2024-27982](https://patchblox.com/security/data/cve/CVE-2024-27982.md) | High | Node.js 18 and 2 others: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') | 7.5 | 0.0116 |  |
| [CVE-2024-25629](https://patchblox.com/security/data/cve/CVE-2024-25629.md) | High | c-ares: This update for c-ares fixes the following issues:  - CVE-2024-25629: out of bounds read in ares__read_line() (bsc#12... | 7.5 | 0.0035 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo