[ALSA-2026:54530] Important: nodejs:22 security update
Type:
security
Severity:
important
Release date:
2026-09-14
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function (CVE-2026-14257) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-22.23.1-3.module_el8.10.0+4251+b427b8a5.aarch64.rpm 050ea7997ff1902f72a36fc51ba4b68115afdcf1ed07ac2f058138cc2a4db6b9
aarch64 nodejs-devel-22.23.1-3.module_el8.10.0+4251+b427b8a5.aarch64.rpm 1cfb5d743c018e9082dcef382c75e8e9c3d78c9f4a56ed9258e6e6146d7b4bdd
aarch64 v8-12.4-devel-12.4.254.21-1.22.23.1.3.module_el8.10.0+4251+b427b8a5.aarch64.rpm 8e3da112f0888a1e15dd9a9751feb22ee764123d53bb8b01affce223341b24e0
aarch64 nodejs-libs-22.23.1-3.module_el8.10.0+4251+b427b8a5.aarch64.rpm 9a680ac8f584e323c754d009a3719029518a519ad39bf9822d850ab359d0b439
aarch64 nodejs-full-i18n-22.23.1-3.module_el8.10.0+4251+b427b8a5.aarch64.rpm f9d5fc54cc90a525c4aa1a7a5c869049d60b5809a31f45375dbda7e93bf5a98f
aarch64 npm-10.9.8-1.22.23.1.3.module_el8.10.0+4251+b427b8a5.aarch64.rpm fe2dfbd6b69e659362c46ddb7ea1e7ac312902ceae8b50639cd5bf4547376d43
noarch nodejs-docs-22.23.1-3.module_el8.10.0+4251+b427b8a5.noarch.rpm 7dc1f2aa91d9be20cf92ba6ce94c38ad285474b53397986c73d5324295d2d279
noarch nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm 95549e780e9ad76b8e49f9c9db940d99cb8260f37e3d9cf05df2baaf6182e412
noarch nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm aaede6e40164690ca8a8b2229ad4ad4e0faea8ce4f2d6cfb3358572d8576dace
noarch nodejs-nodemon-3.1.14-2.module_el8.10.0+4252+aedd4c30.noarch.rpm d508f09b72b84ef9c50dc71a770ee4132d91d9d7bb0812aefa82bd85c7b1d693
ppc64le npm-10.9.8-1.22.23.1.3.module_el8.10.0+4251+b427b8a5.ppc64le.rpm 35ff1a80486601f4c31a1c00a625914be8220ef012e585adb7e6d7fe032fd5fb
ppc64le nodejs-full-i18n-22.23.1-3.module_el8.10.0+4251+b427b8a5.ppc64le.rpm 70ed7988dab73f5ffc8fa241eddf9657a48d6688ad95cf4baac56cc42a050a8d
ppc64le v8-12.4-devel-12.4.254.21-1.22.23.1.3.module_el8.10.0+4251+b427b8a5.ppc64le.rpm 883193b354fb62c0e7c875cefcd41a7ec989d741021379787b9e382a714ec009
ppc64le nodejs-devel-22.23.1-3.module_el8.10.0+4251+b427b8a5.ppc64le.rpm c143caa062a037a720140432857e74180c48c3d188f14706a94e4360e87b4f78
ppc64le nodejs-libs-22.23.1-3.module_el8.10.0+4251+b427b8a5.ppc64le.rpm c19c6fcbf8be37656d612a9ed13924e8c3aa1a9ad0dfb7934bd9d700f94a3b58
ppc64le nodejs-22.23.1-3.module_el8.10.0+4251+b427b8a5.ppc64le.rpm cbeda04606407bb8c7dbffe67f123d8d4a8de2c8f6811e7d9ba5d81766b39195
s390x nodejs-libs-22.23.1-3.module_el8.10.0+4251+b427b8a5.s390x.rpm 1c7f86193aaf798ead969c446cd2205bf9c3bb84107f73b93290f241dc466ee1
s390x nodejs-22.23.1-3.module_el8.10.0+4251+b427b8a5.s390x.rpm 4ba75ee9f2713bb77738f0f09e9d15473d9ad7a5a9dc8ab763e2d012524a6943
s390x nodejs-full-i18n-22.23.1-3.module_el8.10.0+4251+b427b8a5.s390x.rpm 5a569f9577ad1105e51d0ce4222ad8e0bfd9fe2fdce635160e901fba89ce809a
s390x v8-12.4-devel-12.4.254.21-1.22.23.1.3.module_el8.10.0+4251+b427b8a5.s390x.rpm 97d6b23e37ca8f77a21024c55a44e44e9b96a5397dca3dc1df164e75b486574c
s390x npm-10.9.8-1.22.23.1.3.module_el8.10.0+4251+b427b8a5.s390x.rpm a5753950892cbe58e05e254ff59dfc12c93716f075ef53cdbabf5a838eed6037
s390x nodejs-devel-22.23.1-3.module_el8.10.0+4251+b427b8a5.s390x.rpm c090c2787a86df20463a38b78b28d046f3730207d1d6e2ea4a57e8629df943ff
x86_64 npm-10.9.8-1.22.23.1.3.module_el8.10.0+4251+b427b8a5.x86_64.rpm 044040b9e18d53ec2f8162e1ffd42fd8df6609d4cc91a134e370bf19d9889c43
x86_64 nodejs-libs-22.23.1-3.module_el8.10.0+4251+b427b8a5.x86_64.rpm 49fcbd2a68249548783958f48dadf0e7ced3bbadaf7288ff7b6dd7f6408200cc
x86_64 nodejs-22.23.1-3.module_el8.10.0+4251+b427b8a5.x86_64.rpm 8a3d4bf4ad3e184cac32773e6cc35c2e2e44c12a1bcdbaa79c09d544352794c9
x86_64 v8-12.4-devel-12.4.254.21-1.22.23.1.3.module_el8.10.0+4251+b427b8a5.x86_64.rpm 924edc08432855cca3c592437359db603bf669d121eb539af6a95e03deed5749
x86_64 nodejs-devel-22.23.1-3.module_el8.10.0+4251+b427b8a5.x86_64.rpm d2a41a9ef3272945b3513ce11185e2aa53668f05dd81879b33b1f535259b0e16
x86_64 nodejs-full-i18n-22.23.1-3.module_el8.10.0+4251+b427b8a5.x86_64.rpm ed32b9e9ed8dabfe8221a5706dde2fd855afcd88a5e3dea5ab6ba025ef3318ac
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.