[ALSA-2026:47058] Important: nodejs:22 security update
Type:
security
Severity:
important
Release date:
2026-08-06
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874) * tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.aarch64.rpm 12e462f67d5de3040f856e9f1544e71ff7196fb454013312a5ce4550033c2728
aarch64 nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.aarch64.rpm 37b7d35ff83d952690d54d6a1bd5380169f7b3909f07bc90fcdab297f3fcf5fa
aarch64 v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.aarch64.rpm 62e1ca0995ebb1a32fda2249927a9959b66de63068591532e6b38939022faaf7
aarch64 nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.aarch64.rpm a116bfd0c3f883212c8782e20b9b0496317562e5205e4b8df81608bc3b1df038
aarch64 nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.aarch64.rpm cc5ccbed776279042bc40f1c077c5554976a2897212983f54704f16bad74c28d
aarch64 npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.aarch64.rpm fbf77fae35c74207bd988d099467fd9b59e94c1a55054e0b184a067c57269adf
noarch nodejs-docs-22.23.1-2.module_el9.8.0+285+5c3b0251.noarch.rpm 4149d8345a3ce567b08472d195eadff6c3ca00bde93ed53a5ed2e7d7f16946d6
noarch nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210
noarch nodejs-nodemon-3.1.14-1.module_el9.8.0+285+5c3b0251.noarch.rpm a9628e7429ef5cf14b877a8372ad29f9f90b850434bddc3188c940493b68bacf
noarch nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042
ppc64le nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.ppc64le.rpm 1b3bfc2828c712eb64981c95b919215c5d17caa24c0afbb86cfa2b31e19a4aaa
ppc64le nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.ppc64le.rpm 1c2f2e9a477ebd31c2e2d97d2c2004ab31a5a8fb6602b62d27dfd7062039d733
ppc64le npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.ppc64le.rpm 21b0e0e605418eeb584d61cb8d43a4dd3d90ec6f48785598c91774d15dfaf667
ppc64le nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.ppc64le.rpm 389cb05043f199a8a10bbe523449ee4a37c6987df8274bdd77679374bb6dcbde
ppc64le v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.ppc64le.rpm 5fc5a0ff63b80bc3abb2371bdb1c4a90e6e83daa646f5bc4bdb3ebd868f259ab
ppc64le nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.ppc64le.rpm c089813887fc3dc9b283e0ff12b5083d60f6101a579906e6ead0a03a0849f7a6
s390x nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm 0e9fa85203629ff244eb30349da21d917e5370a6a1931c32f7f753c89d5d2a3f
s390x nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm 36d9c56a6307ea4d131791e08f6ecf00f0ced06d74b4899a487d82cff8a43f7d
s390x nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm 67956aaed5c341f4524d549a16d4bfe492264d9a20a7041ecae254275251e17d
s390x npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.s390x.rpm 76ce7ad1f8408c910895a98dcab4864f6d0537f25e7168067fe0adf7eb3eeab7
s390x nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm b4f1926fd4af8244816dbc54c418de4e37c8b1ca7cefd3600c7bace40a148ced
s390x v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.s390x.rpm f35563b26fed3bb9dd85811f1c0233c79847300746c23d74cd4c0390236a5f43
x86_64 nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm 0635e96de4a124740fe3036afd779bfff573fcd49a2bd1b1d0319aa2ed34e9fd
x86_64 nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm 0de0e99b05289d2da3cb731b896be3730de19bbe111c3332a05d3e7b3ee4fcce
x86_64 nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm 443152d25dca94a50140f1c8c7d0150658d64d51df9a816eeb290697d86172c1
x86_64 nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm 51e54c6cb51465e0bbb3e107ae385236bff1476b573b2ac45dd5987f7f72116a
x86_64 v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.x86_64.rpm 9b330eeb96528147b93c275ecf65df4c38d7139e8b88c3c55317dd16e98f6f7b
x86_64 npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.x86_64.rpm debd49d3a3da28388a2c71c83f3cd0e20528b7da4522d3b66a62be2079676017
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.