[ALSA-2026:75870] Important: nodejs:22 security update
Type:
security
Severity:
important
Release date:
2026-10-06
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function (CVE-2026-9496) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-22.23.2-2.module_el8.10.0+4296+737cb4d7.aarch64.rpm 3b889aa40afa34a820c0358c68aea9f5693916442eed1c7080dcfda84094ec8a
aarch64 nodejs-full-i18n-22.23.2-2.module_el8.10.0+4296+737cb4d7.aarch64.rpm 5db43bab1c866b11b53259d31a9075f30f003d09db38b8ad572ddf20d09cce33
aarch64 npm-10.9.8-1.22.23.2.2.module_el8.10.0+4296+737cb4d7.aarch64.rpm c8f15997568e2e670dc39780b076066db46b72272676b8995565b500bb94ff3d
aarch64 nodejs-devel-22.23.2-2.module_el8.10.0+4296+737cb4d7.aarch64.rpm ccd458dea695774f847c5aced474d3754d4676274141320df3b4207465eae36e
aarch64 v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el8.10.0+4296+737cb4d7.aarch64.rpm ec1092999e494c48fa99a456eabe808c850faa4cd64ccb0962421faa2584c163
aarch64 nodejs-libs-22.23.2-2.module_el8.10.0+4296+737cb4d7.aarch64.rpm f55dbed485fbc8ee49b82ec3df38866c9553c11a4cf1cd8056acb48934140692
noarch nodejs-docs-22.23.2-2.module_el8.10.0+4296+737cb4d7.noarch.rpm 79584912a508c2818b58ddf1696fb7375907d6648b7c33c171581ba053024efe
noarch nodejs-packaging-bundler-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm 95549e780e9ad76b8e49f9c9db940d99cb8260f37e3d9cf05df2baaf6182e412
noarch nodejs-packaging-2021.06-6.module_el8.10.0+4158+e796f37f.noarch.rpm aaede6e40164690ca8a8b2229ad4ad4e0faea8ce4f2d6cfb3358572d8576dace
noarch nodejs-nodemon-3.1.14-2.module_el8.10.0+4252+aedd4c30.noarch.rpm d508f09b72b84ef9c50dc71a770ee4132d91d9d7bb0812aefa82bd85c7b1d693
ppc64le nodejs-libs-22.23.2-2.module_el8.10.0+4296+737cb4d7.ppc64le.rpm 6b795ef896527712417269bd12b94ae99e54df1f4bbe0b413ad3fb2e9abfe0e1
ppc64le v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el8.10.0+4296+737cb4d7.ppc64le.rpm 95abb84766c0b171011aca41059f911a42562f9b98e956c927224e12cc5947d0
ppc64le nodejs-full-i18n-22.23.2-2.module_el8.10.0+4296+737cb4d7.ppc64le.rpm ae033c8d0cf03756cbceea137eb7639f92e3cef3320d934edcc29da562247693
ppc64le nodejs-devel-22.23.2-2.module_el8.10.0+4296+737cb4d7.ppc64le.rpm d14b515f49efdc50da856ac7cce2da75ecb17452090527025aa108ebd85e395b
ppc64le nodejs-22.23.2-2.module_el8.10.0+4296+737cb4d7.ppc64le.rpm e972e0d4704fd76b77c91b1239c6881cd02f0e406e9f20b2a541338631fc4834
ppc64le npm-10.9.8-1.22.23.2.2.module_el8.10.0+4296+737cb4d7.ppc64le.rpm f520ce7336f239cbb46222a76bb37966747267a16766f0198879237226509ce0
s390x nodejs-libs-22.23.2-2.module_el8.10.0+4296+737cb4d7.s390x.rpm 3c470b1308f862ff95d2b98a83b058e2d32de3495c6dfe75ed3b132cd2ae6234
s390x nodejs-devel-22.23.2-2.module_el8.10.0+4296+737cb4d7.s390x.rpm 8ee7bb2cdff29525ebb79c649946a2d6025b9cad99ee73d7ccfc62ae12967402
s390x nodejs-full-i18n-22.23.2-2.module_el8.10.0+4296+737cb4d7.s390x.rpm af8243b44536d0fc4db2f14007cb622d0605452660dc8dbb9073b69523e86b00
s390x nodejs-22.23.2-2.module_el8.10.0+4296+737cb4d7.s390x.rpm f4498f4f4dd179062dfa5b78d40d339f052e28d6f4ed218566714b238f96874c
s390x npm-10.9.8-1.22.23.2.2.module_el8.10.0+4296+737cb4d7.s390x.rpm f5a91c8012fbdfec0ba15b332e8f9858ae3229c68ffbaaacd35691ac51372f41
s390x v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el8.10.0+4296+737cb4d7.s390x.rpm fc0ea46c3267cd0435c2586fd422ffa695ac3d24610f51380b12f6b095009e90
x86_64 npm-10.9.8-1.22.23.2.2.module_el8.10.0+4296+737cb4d7.x86_64.rpm 38847375fd2131ce44d5b2e508457b588df2ab78cd87ca1892e9a126056171ee
x86_64 nodejs-libs-22.23.2-2.module_el8.10.0+4296+737cb4d7.x86_64.rpm 685669861213c461df35e183176fd904c802ab412bb2ae77f85d000e99454ef7
x86_64 nodejs-22.23.2-2.module_el8.10.0+4296+737cb4d7.x86_64.rpm 75539f4679108e4bf89ea1b9e8d12058fbef69e9602721dc5c839fb65d20b880
x86_64 nodejs-full-i18n-22.23.2-2.module_el8.10.0+4296+737cb4d7.x86_64.rpm 773f4684651748503832b518cc5667ae5f270993c6269e5a9f20bf13ac3a56ed
x86_64 nodejs-devel-22.23.2-2.module_el8.10.0+4296+737cb4d7.x86_64.rpm 7a428f9e7534104c732b606a53fa511ee9f54129fe8974f059e09f0a72e4debd
x86_64 v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el8.10.0+4296+737cb4d7.x86_64.rpm ec3b70b4d86e487b025413aeb87b811e125075769c81ee21b9005af032c69901
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.