[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-MGASA-2026-0009":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":26,"duplicates":27,"related":28,"reserved_at":9,"published_at":35,"modified_at":36,"state":9,"summary":37,"references_raw":39,"kevs":60,"epss":9,"epss_history":61,"metrics":62,"affected":63},"MGASA-2026-0009","Updated nodejs packages fix security vulnerabilities\n\nNode.js HTTP/2 server crashes with unhandled error when receiving\nmalformed HEADERS frame. (CVE-2025-59465)\nUncatchable \"Maximum call stack size exceeded\" error on Node.js via\nasync_hooks leads to process crashes bypassing error handlers.\n(CVE-2025-59466)\nBypass File System Permissions using crafted symlinks. (CVE-2025-55130)\nTimeout-based race conditions make Uint8Array/Buffer.alloc\nnon-zerofilled. (CVE-2025-55131)\nfs.futimes() Bypasses Read-Only Permission Model. (CVE-2025-55132)\nTLS PSK/ALPN Callback Exceptions Bypass Error Handlers, Causing DoS and\nFD Leak. (CVE-2026-21637)\n",null,[],[],[],[14,16,18,20,22,24],{"_key":15},"CVE-2025-59465",{"_key":17},"CVE-2025-59466",{"_key":19},"CVE-2025-55130",{"_key":21},"CVE-2025-55131",{"_key":23},"CVE-2025-55132",{"_key":25},"CVE-2026-21637",[],[],[29,30,31,32,33,34],{"_key":19},{"_key":21},{"_key":23},{"_key":15},{"_key":17},{"_key":25},"2026-01-17T02:48:20Z","2026-04-16T04:21:09.182280Z",{"cisa_kev":38,"cisa_ransomware":38,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[40,46,51,56],{"url":41,"sources":42,"tags":44},"https://advisories.mageia.org/MGASA-2026-0009.html",[43],"osv_mageia",[45],"Advisory",{"url":47,"sources":48,"tags":49},"https://bugs.mageia.org/show_bug.cgi?id=34995",[43],[50],"REPORT",{"url":52,"sources":53,"tags":54},"https://nodejs.org/en/blog/vulnerability/december-2025-security-releases",[43],[50,55],"WEB",{"url":57,"sources":58,"tags":59},"https://nodejs.org/en/blog/release/v22.22.0",[43],[50,55],[],[],[],[64],{"ecosystem":65,"name":66,"vendor":67,"product":66,"cpe_part":9,"purl_type":68,"purl_namespace":67,"purl_name":66,"source":9,"versions":69},"Mageia","nodejs","mageia","rpm",[70],{"version":71,"is_range":72,"range_type":73,"version_start":9,"version_start_type":9,"version_end":74,"version_end_type":75,"fixed_in":9},"lt22_22_0_1_mga9",true,"ecosystem","22.22.0-1.mga9","excluding"]