RHSA-2026:41947: nodejs Red Hat

CVSS: 8.1v3.1HighPublished

Published 23-07-2026Last modified 20-10-2026

Open JSON

Vulnerability summary

RHSA-2026:41947 is a high (CVSS 8.1) vulnerability in nodejs Red Hat.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.1/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 16 · Downstream 0

CVE-2026-11525 CVE-2026-12151 CVE-2026-42338 CVE-2026-48615 CVE-2026-48617 CVE-2026-48618+10 more

Timeline

23-07-2026
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement update

CVSS metrics

1 score · 1 source · 1 version

v3.18.1

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat13 products

nodejs< 1:22.23.1-1.module+el8.10.0+24500+8eb51621
nodejs-debuginfo< 1:22.23.1-1.module+el8.10.0+24500+8eb51621
nodejs-debugsource< 1:22.23.1-1.module+el8.10.0+24500+8eb51621
nodejs-devel< 1:22.23.1-1.module+el8.10.0+24500+8eb51621
nodejs-docs< 1:22.23.1-1.module+el8.10.0+24500+8eb51621

Show all 13

1 vendor · 13 products

References

80 links

Show all 80 references

bugzilla.redhat.com/show_bug.cgi?id=2493331REPORT
bugzilla.redhat.com/show_bug.cgi?id=2493332REPORT
bugzilla.redhat.com/show_bug.cgi?id=2493333REPORT
bugzilla.redhat.com/show_bug.cgi?id=2493335REPORT
bugzilla.redhat.com/show_bug.cgi?id=2493337REPORT
issues.redhat.com/browse/RHEL-176170ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41947.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-6733REPORT
www.cve.org/CVERecord?id=CVE-2026-6733Advisory
nvd.nist.gov/vuln/detail/CVE-2026-6733Advisory
cna.openjsf.org/security-advisories.htmlARTICLE
github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52ARTICLE
hackerone.com/reports/3582376ARTICLE
access.redhat.com/security/cve/CVE-2026-9678REPORT
www.cve.org/CVERecord?id=CVE-2026-9678Advisory
nvd.nist.gov/vuln/detail/CVE-2026-9678Advisory
github.com/nodejs/undici/security/advisories/GHSA-pr7r-676h-xcf6ARTICLE
access.redhat.com/security/cve/CVE-2026-11525REPORT
www.cve.org/CVERecord?id=CVE-2026-11525Advisory
nvd.nist.gov/vuln/detail/CVE-2026-11525Advisory
github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7mARTICLE
access.redhat.com/security/cve/CVE-2026-12151REPORT
www.cve.org/CVERecord?id=CVE-2026-12151Advisory
nvd.nist.gov/vuln/detail/CVE-2026-12151Advisory
github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89qARTICLE
access.redhat.com/security/cve/CVE-2026-42338REPORT
www.cve.org/CVERecord?id=CVE-2026-42338Advisory
nvd.nist.gov/vuln/detail/CVE-2026-42338Advisory
github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8gARTICLE
access.redhat.com/security/cve/CVE-2026-48615REPORT
www.cve.org/CVERecord?id=CVE-2026-48615Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48615Advisory
nodejs.org/en/blog/vulnerability/june-2026-security-releasesARTICLE
access.redhat.com/security/cve/CVE-2026-48618REPORT
www.cve.org/CVERecord?id=CVE-2026-48618Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48618Advisory
access.redhat.com/security/cve/CVE-2026-48619REPORT
www.cve.org/CVERecord?id=CVE-2026-48619Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48619Advisory
access.redhat.com/security/cve/CVE-2026-48928REPORT
www.cve.org/CVERecord?id=CVE-2026-48928Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48928Advisory
access.redhat.com/security/cve/CVE-2026-48930REPORT
www.cve.org/CVERecord?id=CVE-2026-48930Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48930Advisory
github.com/nodejs/node/commit/7dafafa2424710ded8b77eb7c878e884c1aef64eARTICLE
hackerone.com/reports/3656716ARTICLE
access.redhat.com/security/cve/CVE-2026-48933REPORT
www.cve.org/CVERecord?id=CVE-2026-48933Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48933Advisory
access.redhat.com/security/cve/CVE-2026-48934REPORT
www.cve.org/CVERecord?id=CVE-2026-48934Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48934Advisory
access.redhat.com/security/cve/CVE-2026-48935REPORT
www.cve.org/CVERecord?id=CVE-2026-48935Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48935Advisory
access.redhat.com/security/cve/CVE-2026-48617REPORT
bugzilla.redhat.com/show_bug.cgi?id=2490521REPORT
www.cve.org/CVERecord?id=CVE-2026-48617Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48617Advisory
hackerone.com/reports/3692858ARTICLE
access.redhat.com/security/cve/CVE-2026-48931REPORT
bugzilla.redhat.com/show_bug.cgi?id=2491494REPORT
www.cve.org/CVERecord?id=CVE-2026-48931Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48931Advisory
access.redhat.com/security/cve/CVE-2026-48937REPORT
bugzilla.redhat.com/show_bug.cgi?id=2490545REPORT
www.cve.org/CVERecord?id=CVE-2026-48937Advisory
nvd.nist.gov/vuln/detail/CVE-2026-48937Advisory
hackerone.com/reports/3658225ARTICLE