RHSA-2026:62416

Advisory lineage Upstream: 9 Downstream: 0
Published: 03 Sept 2026, 10:14
Last modified:19 Sept 2026, 10:13

Vulnerability Summary

Overall Risk (default)
medium
34/100
CVSS Score
8.6 HIGH
3.1 (osv_red_hat)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Sept 2026, 10:14
Published
Vulnerability first disclosed
19 Sept 2026, 10:13
Last Modified
Vulnerability information updated

Description

Red Hat Security Advisory: nodejs:22 security update

CVSS Metrics

  • v3.1•HIGH•Score: 8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Affected Systems

  • redhat•nodejs

    < 1:22.23.2-1.module+el9.6.0+24769+299a7e3a

  • redhat•nodejs-debuginfo

    < 1:22.23.2-1.module+el9.6.0+24769+299a7e3a

  • redhat•nodejs-debugsource

    < 1:22.23.2-1.module+el9.6.0+24769+299a7e3a

  • redhat•nodejs-devel

    < 1:22.23.2-1.module+el9.6.0+24769+299a7e3a

  • redhat•nodejs-docs

    < 1:22.23.2-1.module+el9.6.0+24769+299a7e3a

  • redhat•nodejs-full-i18n

    < 1:22.23.2-1.module+el9.6.0+24769+299a7e3a

  • redhat•nodejs-libs

    < 1:22.23.2-1.module+el9.6.0+24769+299a7e3a

  • redhat•nodejs-libs-debuginfo

    < 1:22.23.2-1.module+el9.6.0+24769+299a7e3a

  • redhat•nodejs-nodemon

    < 0:3.1.14-2.module+el9.6.0+24789+4011c12f

  • redhat•nodejs-packaging

    < 0:2021.06-4.module+el9.6.0+23473+45664c2d

  • redhat•nodejs-packaging-bundler

    < 0:2021.06-4.module+el9.6.0+23473+45664c2d

  • redhat•npm

    < 1:10.9.8-1.22.23.2.1.module+el9.6.0+24769+299a7e3a

  • redhat•v8-12.4-devel

    < 3:12.4.254.21-1.22.23.2.1.module+el9.6.0+24769+299a7e3a

References (57)