RHSA-2025:1351

Advisory lineage Upstream: 3 Downstream: 0
Published: 13 Feb 2025, 10:05
Last modified:12 Jul 2026, 10:03

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.7 HIGH
3.0 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

13 Feb 2025, 10:05
Published
Vulnerability first disclosed
12 Jul 2026, 10:03
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: nodejs:20 security update

CVSS Metrics

  • v3.0•HIGH•Score: 7.7CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected Systems

  • redhat•nodejs

    < 1:20.18.2-1.module+el8.10.0+22767+a3309b10

  • redhat•nodejs-debuginfo

    < 1:20.18.2-1.module+el8.10.0+22767+a3309b10

  • redhat•nodejs-debugsource

    < 1:20.18.2-1.module+el8.10.0+22767+a3309b10

  • redhat•nodejs-devel

    < 1:20.18.2-1.module+el8.10.0+22767+a3309b10

  • redhat•nodejs-docs

    < 1:20.18.2-1.module+el8.10.0+22767+a3309b10

  • redhat•nodejs-full-i18n

    < 1:20.18.2-1.module+el8.10.0+22767+a3309b10

  • redhat•nodejs-nodemon

    < 0:3.0.1-1.module+el8.10.0+22767+a3309b10

  • redhat•nodejs-packaging

    < 0:2021.06-4.module+el8.10.0+22767+a3309b10

  • redhat•nodejs-packaging-bundler

    < 0:2021.06-4.module+el8.10.0+22767+a3309b10

  • redhat•npm

    < 1:10.8.2-1.20.18.2.1.module+el8.10.0+22767+a3309b10

References (24)