[ALSA-2026:47057] Important: nodejs:24 security update
Type:
security
Severity:
important
Release date:
2026-08-06
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874) * tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.aarch64.rpm 0d53b85ef36e97f563d17d7890e6c6d752f816543aae3b4db306c3771cb84e86
aarch64 v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.aarch64.rpm 54b0afaa81cf0251855d3e9a17dfe492b7b5a22de465b635c0f5bea82bd00e4b
aarch64 nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.aarch64.rpm 6b9dddbb720662d54f016188811f334524d00bcb4b16e3e9cc4b2560b6e913e2
aarch64 nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.aarch64.rpm 772de51c5b172173c06282a73edfd810f4b7c058046c6ea1a9b9b19b6c7a460d
aarch64 nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.aarch64.rpm d625fb3fde66e4b77edba91763444c89a960dacf9ecb4c45df5056b047e1c1fc
noarch nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a
noarch npm-11.16.0-1.24.18.0.3.module_el9.8.0+286+9023ffdb.noarch.rpm 8e61e682f568aab5e0ffee64e8f19d13ab323ff7264dcd0039237189a351dc87
noarch nodejs-nodemon-3.1.14-2.module_el9.8.0+286+9023ffdb.noarch.rpm b09ddf0f03d8df5ac2e78c82a437fb736aa7f4abb64e9b6c426b73e5e6f5d7bd
noarch nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4
noarch nodejs-docs-24.18.0-3.module_el9.8.0+286+9023ffdb.noarch.rpm e962b7e2f2384848cee4bf0f840c21d10d7f29262944b3f62f55483d1ebb568c
ppc64le nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.ppc64le.rpm 01d37179367bfda683cf133ebbf86652360ebba5acf4fe6e30f013d5fafa7243
ppc64le nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.ppc64le.rpm 0f3f56112a6019a8aea1754b0f142dce2b457cca0b1b76773692a26f4c2ad0ae
ppc64le nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.ppc64le.rpm 8fa4ab743bc1f917deae5bbd45ca49699a22afd483a41b6065f4aa40345af1b4
ppc64le v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.ppc64le.rpm 9a878e7bf95b2d880ccdb8ac455aaa8c2b5fcc96fedc15ee36104771dc776d25
ppc64le nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.ppc64le.rpm b158d20b00a800edcdf74ff7964c0400dd20a57747d852971358dd2cdaa6359d
s390x nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm 053c944b46970fa1a81fb84fd65c14377573fb8935addc580e429457bd697832
s390x nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm 4c4572930d342be70f9928952eba2876fbeeb70b102f38bf96565935dd7a3a55
s390x nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm 6d3209d5838f880c71651d41ee0c7532290d0f4d7862e6445eb2c3a1f100341f
s390x v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.s390x.rpm 7e79c24c04a1a88c7d411eee88ccb7359d0bc1402b4a5fdd6fc4af4cbbd7da75
s390x nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm c88929687bc8c29d82260aef8d447ca94b7656319be012c7e22ee398c8d5822f
x86_64 nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm 16c08207394e16d85af7150c7fea3122aab98755e1912812aff2a2ef1e64e08c
x86_64 nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm 78871dba67f073f37329a8f44a79398f11f1216fa20a86cc7b3a473e385ee3e6
x86_64 nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm bb2e1683d975b818de04a43c990ad5c74a3634871d3f18d2aa1b3f68072865f7
x86_64 v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.x86_64.rpm c4dce6818802abb6fa7adcec32a4ef093b53309cbf09c176a123aff3290bd074
x86_64 nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm f133c1e46f085ab631c7c537729f4dc33dc7308181006b1ccf1fe2237b7b1331
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.