[ALSA-2026:54371] Important: nodejs:24 security update
Type:
security
Severity:
important
Release date:
2026-09-14
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function (CVE-2026-14257) * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification (CVE-2026-54272) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-24.18.0-3.module_el8.10.0+4250+09238ed4.aarch64.rpm 0995ae8dec1615893cfab0edfbcaed5173576a120bb6003c58748472ab8f6e6e
aarch64 v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4.aarch64.rpm 2cd80a25e7c2e75600ad68e73a51bb86651d9c2ce341a20f77d7913e0dee57f8
aarch64 nodejs-libs-24.18.0-3.module_el8.10.0+4250+09238ed4.aarch64.rpm 51bdecb5c671a9d6f8a40b81440c90b78a6dcdc019081b7048f13d119ad7604b
aarch64 nodejs-devel-24.18.0-3.module_el8.10.0+4250+09238ed4.aarch64.rpm 67a155311f2064ba0d8d4d10a2c1a0e1ee0fae2a9923c01694616f6727f1a0cf
aarch64 nodejs-full-i18n-24.18.0-3.module_el8.10.0+4250+09238ed4.aarch64.rpm d20e8c27c148d46c1dd9df40ff8bc61da2009a9ade2fb52bd9247ee101182f6b
noarch npm-11.16.0-1.24.18.0.3.module_el8.10.0+4250+09238ed4.noarch.rpm 201d993641952b6d55cddb97bcb31be103cd7ac79fd0e8d4a6adb8e72d8faa76
noarch nodejs-packaging-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm 318c493f93f2190506361306b5759e5e65eee18e3a8d85b195c800d8b7064bc0
noarch nodejs-docs-24.18.0-3.module_el8.10.0+4250+09238ed4.noarch.rpm 961e53d5fb4a6d71e8923a9f8484c6ea42ccae5db10f339b66500a28fbde00bc
noarch nodejs-nodemon-3.1.14-2.module_el8.10.0+4250+09238ed4.noarch.rpm 9af610bfd34078e749211d051d0a58ec3936da900b69e735bc529b46435cf37f
noarch nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4086+70facd4a.noarch.rpm f4b4a25dc07327deb51619715aae6bd35d22e29ccfc97141c0b61de3a1995eee
ppc64le nodejs-24.18.0-3.module_el8.10.0+4250+09238ed4.ppc64le.rpm 08c58d72194edaba2ee5f77c9655aa446c459a39c5297cbb0bdb53d5d9fb4720
ppc64le nodejs-devel-24.18.0-3.module_el8.10.0+4250+09238ed4.ppc64le.rpm 1713975934510d53c186d84fcad661f395a79f35715f31430d94ef2995ef28d3
ppc64le nodejs-full-i18n-24.18.0-3.module_el8.10.0+4250+09238ed4.ppc64le.rpm 6975acc89929369c96744a963c008c8aa1de7a458b6086c36d30222791b8bb05
ppc64le v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4.ppc64le.rpm a098a5c205c0b6e54cd9b166a1fa70423be350d156f373302ddaefbc01e09dd1
ppc64le nodejs-libs-24.18.0-3.module_el8.10.0+4250+09238ed4.ppc64le.rpm fe9364534da1bc1e7b3100f31a8b617102adb76efe7b4f364d66cbf01de8de8b
s390x nodejs-devel-24.18.0-3.module_el8.10.0+4250+09238ed4.s390x.rpm 09383532e8ea025a62513fbc31eb5ba8691a1bf116058fdef8a258352fa6bdcd
s390x v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4.s390x.rpm 26358386a33caa48a890ebfeaf1ae5269afcfea34d317936f06fb6eba7e60a86
s390x nodejs-libs-24.18.0-3.module_el8.10.0+4250+09238ed4.s390x.rpm 2a759dac91c332f13f06afc622af1abc14ca9234551b2403b7c894ac4c35e7a0
s390x nodejs-24.18.0-3.module_el8.10.0+4250+09238ed4.s390x.rpm 832fdf7e65e68b90a6e0dc27208ce5e23ccd12d6ab3ad281ebddc9ab0a37cdaa
s390x nodejs-full-i18n-24.18.0-3.module_el8.10.0+4250+09238ed4.s390x.rpm aed54caa7710eccce71147144218b7929393453fcd8c79ceb3d5ae9c24ec8ef5
x86_64 nodejs-devel-24.18.0-3.module_el8.10.0+4250+09238ed4.x86_64.rpm 4a906da84a443e014001d7aa6c4b3c7dd5ec482f3f20ea3cabba01dea818a336
x86_64 nodejs-full-i18n-24.18.0-3.module_el8.10.0+4250+09238ed4.x86_64.rpm 6a7e6bc25bee0f3d1163492f153a9b1a3e8ddacfd7f3de8f67981b027ba59ef5
x86_64 nodejs-24.18.0-3.module_el8.10.0+4250+09238ed4.x86_64.rpm 7e1fb6ce0582dde15368755ac5babe5467706359473f473d83153a71aa64e00d
x86_64 nodejs-libs-24.18.0-3.module_el8.10.0+4250+09238ed4.x86_64.rpm 91335692e08980cc96810b653ab6a686984dc8eefb9b78dff7e8f2545d3d6905
x86_64 v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el8.10.0+4250+09238ed4.x86_64.rpm e4eb355b80213fbdd176a568def2d34933e9bae63e3fcddfbaea2c186d8706f0
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.