RHSA-2026:35891

Advisory lineage Upstream: 15 Downstream: 0
Published: 07 Jul 2026, 10:09
Last modified:20 Jul 2026, 10:12

Vulnerability Summary

Overall Risk (default)
medium
32/100
CVSS Score
8.1 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

07 Jul 2026, 10:09
Published
Vulnerability first disclosed
20 Jul 2026, 10:12
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update

CVSS Metrics

  • v3.1•HIGH•Score: 8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected Systems

  • redhat•nodejs

    < 1:24.18.0-1.module+el9.8.0+24456+b244c3b4

  • redhat•nodejs-debuginfo

    < 1:24.18.0-1.module+el9.8.0+24456+b244c3b4

  • redhat•nodejs-debugsource

    < 1:24.18.0-1.module+el9.8.0+24456+b244c3b4

  • redhat•nodejs-devel

    < 1:24.18.0-1.module+el9.8.0+24456+b244c3b4

  • redhat•nodejs-docs

    < 1:24.18.0-1.module+el9.8.0+24456+b244c3b4

  • redhat•nodejs-full-i18n

    < 1:24.18.0-1.module+el9.8.0+24456+b244c3b4

  • redhat•nodejs-libs

    < 1:24.18.0-1.module+el9.8.0+24456+b244c3b4

  • redhat•nodejs-libs-debuginfo

    < 1:24.18.0-1.module+el9.8.0+24456+b244c3b4

  • redhat•nodejs-nodemon

    < 0:3.0.3-3.module+el9.8.0+24355+35d95b59

  • redhat•nodejs-packaging

    < 0:2021.06-6.module+el9.8.0+24355+35d95b59

  • redhat•nodejs-packaging-bundler

    < 0:2021.06-6.module+el9.8.0+24355+35d95b59

  • redhat•npm

    < 1:11.16.0-1.24.18.0.1.module+el9.8.0+24456+b244c3b4

  • redhat•v8-13.6-devel

    < 3:13.6.233.17-1.24.18.0.1.module+el9.8.0+24456+b244c3b4

References (76)