[ALSA-2026:55603] Important: nodejs:24 security update
Type:
security
Severity:
important
Release date:
2026-09-01
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data (CVE-2026-11822) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function (CVE-2026-14257) * ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification (CVE-2026-54272) * brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-devel-24.18.0-6.module_el9.8.0+292+f4eaf8b2.aarch64.rpm 28d93c09f584d4c99c46e40b8254521c3818b2391e9bb3a09c0d0b8301afbd56
aarch64 nodejs-libs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.aarch64.rpm 315c3c2771800401e6714827559ed4322bf391ce3ad46c1b37858128d7ac0a8c
aarch64 nodejs-full-i18n-24.18.0-6.module_el9.8.0+292+f4eaf8b2.aarch64.rpm 321bfe0204879f148f800e8d451a8e5caeb9c93d0c4f19a99ba624a8cd19b4ba
aarch64 v8-13.6-devel-13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.aarch64.rpm 60100a00d0a74ecc29c8f405a8b3f3bdab2cfe5df8c7ee703c38a5ae78917eb6
aarch64 nodejs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.aarch64.rpm 99279c34b46fbd6a8a79c71b2f97a68fce2cec74314ff41d4a9329dd45be1d62
noarch npm-11.16.0-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.noarch.rpm 1b005d31fb45adddbdee96b5dcf17f14a5a7ea61afd6780ff3735b33dfa864cb
noarch nodejs-nodemon-3.1.14-3.module_el9.8.0+292+f4eaf8b2.noarch.rpm 34593bae84e3eda22d3c85db93eb84f883d07844a6d2c91217637b2c000e7e3b
noarch nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a
noarch nodejs-docs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.noarch.rpm b88690db148d544aa4ad64b894f87f220091e46636c3caf1eea2c6f664f8ece2
noarch nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4
ppc64le nodejs-devel-24.18.0-6.module_el9.8.0+292+f4eaf8b2.ppc64le.rpm 0fa08a6421024022c6d429bb070bb375aac6a2f49d57dd1770c54ba102be3db0
ppc64le v8-13.6-devel-13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.ppc64le.rpm 895e2773c3a6463887f9d090fdf8c71191bc9dc8ba1885636eb482e0ed375dfd
ppc64le nodejs-full-i18n-24.18.0-6.module_el9.8.0+292+f4eaf8b2.ppc64le.rpm b16dd1900a4bc3ac590ae7854b1ddb819f7d2129979966600542938f995410df
ppc64le nodejs-libs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.ppc64le.rpm d95fc55811315e6eb42ef505e18f242f754ac7ae73448f4dce73e684c223d910
ppc64le nodejs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.ppc64le.rpm f31759ae6a0b6cb71d92a3e975ba960dab26c529accf078915caa13bd0066038
s390x nodejs-libs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.s390x.rpm 14ab5005040ca5ddd64e0979035745ce4dd0596a55b5963847d6ac619b3f5cbe
s390x v8-13.6-devel-13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.s390x.rpm 4a22b4ad7fe1194c5ac2729a7ce49cc532d88487d9059be9095b3f184dee6579
s390x nodejs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.s390x.rpm 66bb36d71c2320bbdb6bb9af0d767e4de8501a83d1d50cbaa6b01ad821603f2a
s390x nodejs-devel-24.18.0-6.module_el9.8.0+292+f4eaf8b2.s390x.rpm 8a911dcb1c65ab0ca7ea5d09394032c7851f45a837a6a4aaf464339903ab8726
s390x nodejs-full-i18n-24.18.0-6.module_el9.8.0+292+f4eaf8b2.s390x.rpm febbf75ad135ce9d972a985d8f81c90740e1d149140f62946080f44ec7d4b619
x86_64 nodejs-libs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm 99e2a6f62154c36a078efee417392bd69c65915794e4bdb3b517e9514315afd3
x86_64 v8-13.6-devel-13.6.233.17-1.24.18.0.6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm aeadb32335017021aea176b1de5f497f0a16cb875dc7d150e6d5383f3503d88e
x86_64 nodejs-24.18.0-6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm b85cb78c9e2f6e87a1ec70b888ab9daa79cd2cd1bf145f706453d3a26073a035
x86_64 nodejs-full-i18n-24.18.0-6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm c553ed154cd8389b4149fb50c51ab234132973f5b182286e1183e62bcae0659d
x86_64 nodejs-devel-24.18.0-6.module_el9.8.0+292+f4eaf8b2.x86_64.rpm c651230ee75a8bca789c8e77b3c0c18dfca427a06bdcd6cd26f337dbba426088
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.