[ALSA-2026:76750] Important: nodejs:22 security update
Type:
security
Severity:
important
Release date:
2026-10-14
Description:
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function (CVE-2026-9496) * undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 nodejs-libs-22.23.2-2.module_el9.8.0+322+f4aa738c.aarch64.rpm 21a9fb8680a23e3c4d5ba53c38f1a16ba91957bc3a17aa761efbeb680680c6b2
aarch64 nodejs-full-i18n-22.23.2-2.module_el9.8.0+322+f4aa738c.aarch64.rpm 2469285310ebcd96ccf77ec6a907485eee424fbeac202a8a0bef342cbcc03dc1
aarch64 nodejs-devel-22.23.2-2.module_el9.8.0+322+f4aa738c.aarch64.rpm 395a83520f1dd26fd25c883fe7d342c87e73056c7581bdb4aaa6be4ac576f481
aarch64 v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el9.8.0+322+f4aa738c.aarch64.rpm a10bc6466c10e01bdec46ad643d8b5426eaf476d8c4afb2f029b763f132a6228
aarch64 nodejs-22.23.2-2.module_el9.8.0+322+f4aa738c.aarch64.rpm bf593ef4f1965802980b760b6b8669e41bab576f15e3075f56b2c741d704e02f
aarch64 npm-10.9.8-1.22.23.2.2.module_el9.8.0+322+f4aa738c.aarch64.rpm ea7d3412c625f57af3edf9682c09256caa42ab74c1c7400909bb5112c3f260bb
noarch nodejs-nodemon-3.1.14-2.module_el9.8.0+302+959ebcd4.noarch.rpm 5190b3e52c15db838024cbc8fabaabca0e1df1b58db46abb8e280935c57129f6
noarch nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210
noarch nodejs-docs-22.23.2-2.module_el9.8.0+322+f4aa738c.noarch.rpm dc0de39d827a00ab6bd0d5487e3d4c7971b5e3c74d6268d6e135d21f1f870add
noarch nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042
ppc64le npm-10.9.8-1.22.23.2.2.module_el9.8.0+322+f4aa738c.ppc64le.rpm 0095a59f30ba2b3b2d3def0a3b5083c01455f2900ffcd1233ecd3e0642adde34
ppc64le nodejs-full-i18n-22.23.2-2.module_el9.8.0+322+f4aa738c.ppc64le.rpm 2ecf515488356866d8195eceb006ae2fe272bd7bd9209e20a23fb90038fd62fd
ppc64le nodejs-libs-22.23.2-2.module_el9.8.0+322+f4aa738c.ppc64le.rpm 977e326b7b21c8d8f8c99875508a3e239d7b0f12b39e838fd5250bbedac09483
ppc64le nodejs-22.23.2-2.module_el9.8.0+322+f4aa738c.ppc64le.rpm c34d7e9a30d04fc1b595a43ad480adc7f494c35cce5693ee97409a535b6fcb30
ppc64le v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el9.8.0+322+f4aa738c.ppc64le.rpm dd1d784feaa11c8c6df177473d2d2d221d0b082ea5392b4c9bc523a14c8d565c
ppc64le nodejs-devel-22.23.2-2.module_el9.8.0+322+f4aa738c.ppc64le.rpm e279f604ee0b4eac8d7b54bccd6dd2852b1da6cfa5c999c33496795f7fe68e77
s390x nodejs-22.23.2-2.module_el9.8.0+322+f4aa738c.s390x.rpm 1f7da923820f425dd2dd02e19993c461d02878c5ccba94b30f1d69d8ca35f439
s390x npm-10.9.8-1.22.23.2.2.module_el9.8.0+322+f4aa738c.s390x.rpm 3c8bbfab5798b6d982cdbe27de610a8ce667ce43fd22526364df2420385095a0
s390x nodejs-full-i18n-22.23.2-2.module_el9.8.0+322+f4aa738c.s390x.rpm 623593cd693b660d750faed1f8cf6ac5ec563fe62844400c57a1151f24b23656
s390x nodejs-devel-22.23.2-2.module_el9.8.0+322+f4aa738c.s390x.rpm 689eeea4f40fcab6d6eee3bd04463c7ff8301596f16103eb8d364065f3abf44b
s390x nodejs-libs-22.23.2-2.module_el9.8.0+322+f4aa738c.s390x.rpm 84932e37327dffcbcf9e1f0f2cc50ae27aa38b5c0072adf7360162595b06a6f9
s390x v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el9.8.0+322+f4aa738c.s390x.rpm b30f8c1ac5d8c164695a8d34ad114a21d2db0ac3956d2ddddf72de6242c27db6
x86_64 nodejs-devel-22.23.2-2.module_el9.8.0+322+f4aa738c.x86_64.rpm 4efd59eed36389dc57286ebd3fa99a3bb536301c57bede8dc3b098095f714888
x86_64 nodejs-full-i18n-22.23.2-2.module_el9.8.0+322+f4aa738c.x86_64.rpm 5268a142c98d399de639256ce6674b06751dc1d1189d8bb65d9ce48b748f718b
x86_64 v8-12.4-devel-12.4.254.21-1.22.23.2.2.module_el9.8.0+322+f4aa738c.x86_64.rpm 606c771d26b348e7105dadb7ebdd22d72768157d418513706bfe5c0340fdc933
x86_64 nodejs-22.23.2-2.module_el9.8.0+322+f4aa738c.x86_64.rpm c3f753d5c056845c28afee0f6d211eab86576afd34e2079d396f5669e1c579f0
x86_64 npm-10.9.8-1.22.23.2.2.module_el9.8.0+322+f4aa738c.x86_64.rpm d577f6975a9c5463a9620da4b9470bf96a4c33ebec115c706ac2f002c319f4b4
x86_64 nodejs-libs-22.23.2-2.module_el9.8.0+322+f4aa738c.x86_64.rpm eba5a125080ab25e9b7917bb3624430a9cc04cd972fca8ec5ed8f940185daa59
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.