Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-27135 (GCVE-0-2026-27135)
Vulnerability from cvelistv5 – Published: 2026-03-18 17:59 – Updated: 2026-07-15 01:14
VLAI
EPSS
VEX
Title
nghttp2 Denial of service: Assertion failure due to the missing state validation
Summary
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-617 - Reachable Assertion
Assigner
References
55 references
Impacted products
68 products
| Vendor | Product | Version | |
|---|---|---|---|
| nghttp2 | nghttp2 |
Affected:
< 1.68.1
|
|
| Red Hat | JBoss Core Services for RHEL 8 |
Unaffected:
0:1.64.0-3.el8jbcs , < *
(rpm)
cpe:/a:redhat:jboss_core_services:1::el8 |
|
| Red Hat | JBoss Core Services on RHEL 7 |
Unaffected:
0:1.64.0-3.el7jbcs , < *
(rpm)
cpe:/a:redhat:jboss_core_services:1::el7 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:22.22.2-1.el10_1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.64.0-2.el10_1.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.1 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:24.14.1-2.el10_1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.1 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
1:22.22.2-2.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.64.0-2.el10_0.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260331102257.6d880403 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260408131901.6d880403 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260414073138.489197e6 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:1.33.0-6.el8_10.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support |
Unaffected:
0:1.33.0-3.el8_2.4 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.2 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:1.33.0-4.el8_4.3 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:1.33.0-4.el8_4.3 , < *
(rpm)
cpe:/o:redhat:rhel_eus_long_life:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:1.33.0-4.el8_6.3 , < *
(rpm)
cpe:/o:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:1.33.0-4.el8_6.3 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:1.33.0-4.el8_6.3 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:1.33.0-5.el8_8.2 , < *
(rpm)
cpe:/o:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:1.33.0-5.el8_8.2 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
9070020260401095228.rhel9 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
9070020260402152654.rhel9 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
9070020260409073121.rhel9 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.43.0-6.el9_7.1 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions |
Unaffected:
0:1.43.0-5.el9_0.4 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:9.0 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:1.43.0-5.el9_2.4 , < *
(rpm)
cpe:/o:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
9040020260421133644.rhel9 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support |
Unaffected:
0:1.43.0-5.el9_4.4 , < *
(rpm)
cpe:/o:redhat:rhel_eus:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
9060020260409121057.rhel9 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
9060020260422064119.rhel9 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.43.0-6.el9_6.1 , < *
(rpm)
cpe:/o:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat JBoss Core Services 2.4.62.SP4 |
cpe:/a:redhat:jboss_core_services:1 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.12 |
Unaffected:
412.86.202605271418-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.12::el8 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.13 |
Unaffected:
413.92.202605271328-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.13::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.14 |
Unaffected:
414.92.202605060243-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.14::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.15 |
Unaffected:
415.92.202605060220-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.15::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.16 |
Unaffected:
416.94.202605200242-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.16::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
417.94.202605112123-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
418.94.202605260517-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
|
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
4.19.9.6.202605201155-0 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
|
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325677 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
|
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325711 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
|
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325710 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
|
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-3.1777325680 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
|
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325709 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
|
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325680 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
|
| Red Hat | RHEL-8 based Middleware Containers |
Unaffected:
7.13.5-4.1777325708 , < *
(rpm)
cpe:/a:redhat:rhosemc:1.0::el8 |
|
| Red Hat | Red Hat AI Inference Server 3.2 |
Unaffected:
1779223654 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.2::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.2 |
Unaffected:
1779223651 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.2::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.2 |
Unaffected:
1780681984 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.2::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778244559 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778244531 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778274666 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778244546 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1778101579 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Discovery 2 |
Unaffected:
1778156756 , < *
(rpm)
cpe:/a:redhat:discovery:2::el9 |
|
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.68.1-1.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
|
| Red Hat | Red Hat Insights proxy 1.5 |
Unaffected:
1776868961 , < *
(rpm)
cpe:/a:redhat:insights_proxy:1.5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1776868774 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1776868744 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1776868772 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1776868842 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1777459441 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1777454300 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Red Hat | Red Hat Update Infrastructure 5 |
Unaffected:
1777459504 , < *
(rpm)
cpe:/a:redhat:rhui:5::el9 |
|
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.6 , < *
(custom)
|
|
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP |
Affected:
V3.1.6 , < *
(custom)
|
|
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP |
Affected:
V3.1.6 , < *
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-27135",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-18T18:36:41.841104Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-18T18:36:48.198Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-05-13T21:31:25.337Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/03/20/3"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00025.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_core_services:1::el8"
],
"defaultStatus": "affected",
"packageName": "jbcs-httpd24-nghttp2",
"product": "JBoss Core Services for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.64.0-3.el8jbcs",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_core_services:1::el7"
],
"defaultStatus": "affected",
"packageName": "jbcs-httpd24-nghttp2",
"product": "JBoss Core Services on RHEL 7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.64.0-3.el7jbcs",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"defaultStatus": "affected",
"packageName": "nodejs22",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:22.22.2-1.el10_1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.64.0-2.el10_1.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"defaultStatus": "affected",
"packageName": "nodejs24",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:24.14.1-2.el10_1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "nodejs22",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:22.22.2-2.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.64.0-2.el10_0.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "nodejs:22",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260331102257.6d880403",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "nodejs:24",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260408131901.6d880403",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "nodejs:20",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260414073138.489197e6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-6.el8_10.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.2"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-3.el8_2.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-4.el8_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-4.el8_4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-4.el8_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-4.el8_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-4.el8_6.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-5.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.33.0-5.el8_8.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "nodejs:22",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9070020260401095228.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "nodejs:24",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9070020260402152654.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "nodejs:20",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9070020260409073121.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.43.0-6.el9_7.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.0"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.43.0-5.el9_0.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.43.0-5.el9_2.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "nodejs:20",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9040020260421133644.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus:9.4"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.43.0-5.el9_4.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "nodejs:22",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9060020260409121057.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "nodejs:20",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "9060020260422064119.rhel9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "nghttp2",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.43.0-6.el9_6.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:jboss_core_services:1"
],
"defaultStatus": "unaffected",
"packageName": "nghttp2",
"product": "Red Hat JBoss Core Services 2.4.62.SP4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "412.86.202605271418-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "413.92.202605271328-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "414.92.202605060243-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "415.92.202605060220-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "416.94.202605200242-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "417.94.202605112123-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "418.94.202605260517-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "rhcos",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.19.9.6.202605201155-0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325677",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-businesscentral-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325711",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-controller-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325710",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-3.1777325680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-kieserver-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325709",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-process-migration-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325680",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"defaultStatus": "affected",
"packageName": "rhpam-7/rhpam-smartrouter-rhel8",
"product": "RHEL-8 based Middleware Containers",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "7.13.5-4.1777325708",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779223654",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-rocm-rhel9",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779223651",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/model-opt-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1780681984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/model-opt-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778244559",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-rocm-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778244531",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-cuda-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778274666",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-spyre-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778244546",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-server-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778101579",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"defaultStatus": "affected",
"packageName": "discovery/discovery-ui-rhel9",
"product": "Red Hat Discovery 2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778156756",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "nghttp2-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.68.1-1.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:insights_proxy:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "insights-proxy/insights-proxy-container-rhel9",
"product": "Red Hat Insights proxy 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868961",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/cds-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868774",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/haproxy-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868744",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/installer-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868772",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/rhua-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776868842",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/cds-kubernetes-tp-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777459441",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/installer-tp-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777454300",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"packageName": "rhui5/rhua-tp-rhel9",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777459504",
"versionType": "rpm"
}
]
}
],
"datePublic": "2026-03-18T17:59:02.045Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS)."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-617",
"description": "Reachable Assertion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-15T01:14:36.116Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"name": "RHBZ#2448754",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27200"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21695"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13812"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21690"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:15087"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14773"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17596"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21656"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8868"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7310"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7666"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7080"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7675"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8339"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7670"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9711"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9874"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7983"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7896"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7302"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7350"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7667"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8541"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8539"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8538"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8540"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8546"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8545"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8548"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:7668"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:25096"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19724"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19725"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16008"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16174"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14937"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6190"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:27201"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11768"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:27200: Red Hat JBoss Core Services on RHEL 7 Server, Red Hat JBoss Core Services on RHEL 8"
},
{
"lang": "en",
"value": "RHSA-2026:21695: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:13812: Middleware Containers for OpenShift"
},
{
"lang": "en",
"value": "RHSA-2026:21690: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:15087: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:14773: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:20087: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:17596: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:21656: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:20040: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:8868: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:7310: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:7666: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:7080: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:7675: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:8339: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:7123: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:7670: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:9711: Red Hat Enterprise Linux AppStream EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:9874: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:7983: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:7896: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:7302: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:7350: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:7667: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:8541: Red Hat Enterprise Linux BaseOS AUS (v. 8.2)"
},
{
"lang": "en",
"value": "RHSA-2026:8539: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:8538: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:8540: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:8546: Red Hat Enterprise Linux BaseOS E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:8545: Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:8547: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:8548: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:7668: Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:25096: Red Hat AI Inference Server 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:19724: Red Hat AI Inference Server 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:19725: Red Hat AI Inference Server 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:16008: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:16030: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:16009: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:16174: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:14937: Red Hat Discovery 2"
},
{
"lang": "en",
"value": "RHSA-2026:6190: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:9832: Red Hat Insights proxy 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:27201: Red Hat JBoss Core Services 2.4.62.SP4"
},
{
"lang": "en",
"value": "RHSA-2026:11768: Red Hat Update Infrastructure 5"
},
{
"lang": "en",
"value": "RHSA-2026:10065: Red Hat Update Infrastructure 5"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-18T19:02:13.823Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-18T17:59:02.045Z",
"value": "Made public."
}
],
"title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unknown",
"product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
"vendor": "Siemens",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "V3.1.6",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T12:47:22.165Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
}
],
"x_adpType": "supplier"
}
],
"cna": {
"affected": [
{
"product": "nghttp2",
"vendor": "nghttp2",
"versions": [
{
"status": "affected",
"version": "\u003c 1.68.1"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-617",
"description": "CWE-617: Reachable Assertion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-18T17:59:02.045Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
},
{
"name": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1"
}
],
"source": {
"advisory": "GHSA-6933-cjhr-5qg6",
"discovery": "UNKNOWN"
},
"title": "nghttp2 Denial of service: Assertion failure due to the missing state validation"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-27135",
"datePublished": "2026-03-18T17:59:02.045Z",
"dateReserved": "2026-02-17T18:42:27.044Z",
"dateUpdated": "2026-07-15T01:14:36.116Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-27135",
"date": "2026-07-24",
"epss": "0.00775",
"percentile": "0.51979"
},
"microsoft_vex": {
"current_release_date": "2026-03-27T01:41:20.000Z",
"cve": "CVE-2026-27135",
"id": "msrc_CVE-2026-27135",
"initial_release_date": "2026-03-02T00:00:00.000Z",
"product_status:fixed": "6",
"product_status:known_affected": "6",
"product_status:known_not_affected": "3",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "nghttp2 Denial of service: Assertion failure due to the missing state validation",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-27135.json",
"version": "5"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-27135\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-03-18T18:16:26.723\",\"lastModified\":\"2026-07-15T02:19:03.367\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.\"},{\"lang\":\"es\",\"value\":\"nghttp2 es una implementaci\u00f3n del Protocolo de Transferencia de Hipertexto versi\u00f3n 2 en C. Antes de la versi\u00f3n 1.68.1, la biblioteca nghttp2 deja de leer los datos entrantes cuando la aplicaci\u00f3n llama a la API p\u00fablica orientada al usuario \u0027nghttp2_session_terminate_session\u0027 o \u0027nghttp2_session_terminate_session2\u0027. Estas pueden ser llamadas internamente por la biblioteca cuando esta detecta una situaci\u00f3n sujeta a error de conexi\u00f3n. Debido a la falta de validaci\u00f3n del estado interno, la biblioteca sigue leyendo el resto de los datos despu\u00e9s de que se llama a una de esas APIs. Luego, recibir una trama malformada que causa FRAME_SIZE_ERROR provoca un fallo de aserci\u00f3n. nghttp2 v1.68.1 a\u00f1ade la validaci\u00f3n de estado faltante para evitar el fallo de aserci\u00f3n. No se conocen soluciones alternativas disponibles.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"nghttp2\",\"product\":\"nghttp2\",\"versions\":[{\"version\":\"\u003c 1.68.1\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"JBoss Core Services for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"jbcs-httpd24-nghttp2\",\"cpes\":[\"cpe:/a:redhat:jboss_core_services:1::el8\"],\"versions\":[{\"version\":\"0:1.64.0-3.el8jbcs\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"JBoss Core Services on RHEL 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"jbcs-httpd24-nghttp2\",\"cpes\":[\"cpe:/a:redhat:jboss_core_services:1::el7\"],\"versions\":[{\"version\":\"0:1.64.0-3.el7jbcs\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs22\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\"],\"versions\":[{\"version\":\"1:22.22.2-1.el10_1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\"],\"versions\":[{\"version\":\"0:1.64.0-2.el10_1.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs24\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\"],\"versions\":[{\"version\":\"1:24.14.1-2.el10_1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs22\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"1:22.22.2-2.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.64.0-2.el10_0.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:22\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260331102257.6d880403\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:24\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260408131901.6d880403\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:20\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260414073138.489197e6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:1.33.0-6.el8_10.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.2 Advanced Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.2\"],\"versions\":[{\"version\":\"0:1.33.0-3.el8_2.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:1.33.0-4.el8_4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:1.33.0-4.el8_4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:1.33.0-4.el8_6.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"0:1.33.0-4.el8_6.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"0:1.33.0-4.el8_6.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:1.33.0-5.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:1.33.0-5.el8_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:22\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"9070020260401095228.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:24\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"9070020260402152654.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:20\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"9070020260409073121.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.43.0-6.el9_7.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.0\"],\"versions\":[{\"version\":\"0:1.43.0-5.el9_0.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:1.43.0-5.el9_2.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:20\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"9040020260421133644.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.4\"],\"versions\":[{\"version\":\"0:1.43.0-5.el9_4.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:22\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"9060020260409121057.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nodejs:20\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"9060020260422064119.rhel9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:1.43.0-6.el9_6.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat JBoss Core Services 2.4.62.SP4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2\",\"cpes\":[\"cpe:/a:redhat:jboss_core_services:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.12::el8\"],\"versions\":[{\"version\":\"412.86.202605271418-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.13::el9\"],\"versions\":[{\"version\":\"413.92.202605271328-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"],\"versions\":[{\"version\":\"414.92.202605060243-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"],\"versions\":[{\"version\":\"415.92.202605060220-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"],\"versions\":[{\"version\":\"416.94.202605200242-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"417.94.202605112123-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"418.94.202605260517-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcos\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"4.19.9.6.202605201155-0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhpam-7/rhpam-businesscentral-monitoring-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325677\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhpam-7/rhpam-businesscentral-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325711\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhpam-7/rhpam-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325710\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhpam-7/rhpam-dashbuilder-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-3.1777325680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhpam-7/rhpam-kieserver-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325709\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhpam-7/rhpam-process-migration-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325680\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEL-8 based Middleware Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhpam-7/rhpam-smartrouter-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhosemc:1.0::el8\"],\"versions\":[{\"version\":\"7.13.5-4.1777325708\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"],\"versions\":[{\"version\":\"1779223654\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"],\"versions\":[{\"version\":\"1779223651\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/model-opt-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.2::el9\"],\"versions\":[{\"version\":\"1780681984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/model-opt-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778244559\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778244531\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778274666\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-spyre-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778244546\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1778101579\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Discovery 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"discovery/discovery-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:discovery:2::el9\"],\"versions\":[{\"version\":\"1778156756\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"nghttp2-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.68.1-1.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Insights proxy 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"insights-proxy/insights-proxy-container-rhel9\",\"cpes\":[\"cpe:/a:redhat:insights_proxy:1.5::el9\"],\"versions\":[{\"version\":\"1776868961\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/cds-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1776868774\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/haproxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1776868744\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1776868772\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/rhua-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1776868842\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/cds-kubernetes-tp-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1777459441\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/installer-tp-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1777454300\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhui5/rhua-tp-rhel9\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"],\"versions\":[{\"version\":\"1777459504\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-18T18:36:41.841104Z\",\"id\":\"CVE-2026-27135\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-617\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-617\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nghttp2:nghttp2:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.68.1\",\"matchCriteriaId\":\"1D6F266C-6337-477C-9A88-F7692CF26822\"}]}]}],\"references\":[{\"url\":\"https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/03/20/3\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2026/05/msg00025.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10065\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11768\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13812\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14773\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14937\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:15087\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16008\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16009\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16174\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17596\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19724\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19725\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20040\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20087\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21656\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21690\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21695\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25096\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27200\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:27201\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6190\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7080\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7302\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7310\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7350\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7666\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7667\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7668\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7670\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7675\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7896\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7983\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8339\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8538\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8539\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8540\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8541\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8545\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8546\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8548\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8868\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9711\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9832\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:9874\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-27135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2448754\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-019113.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-06-30T04:02:24+00:00",
"cve": "CVE-2026-27135",
"id": "CVE-2026-27135",
"initial_release_date": "2026-03-18T17:59:02.045000+00:00",
"product_status:fixed": "919",
"product_status:known_not_affected": "58",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-07-22T00:08:17Z",
"cve": "CVE-2026-27135",
"id": "CVE-2026-27135",
"initial_release_date": "2026-03-19T00:26:08Z",
"product_status:known_affected": "706",
"product_status:known_not_affected": "96",
"product_status:recommended": "293",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-27135",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-27135.json",
"version": "46"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2026/03/20/3\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2026/05/msg00025.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-05-13T21:31:25.337Z\"}}, {\"title\": \"nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:jboss_core_services:1::el7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Core Services on RHEL 7 Server\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_core_services:1::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Core Services on RHEL 8\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.12\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Middleware Containers for OpenShift\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.13\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS AUS (v. 8.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS AUS (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.0::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CRB (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat CodeReady Linux Builder EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat CodeReady Linux Builder EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::crb\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:insights_proxy:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Insights proxy 1.5\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:jboss_core_services:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat JBoss Core Services 2.4.62.SP4\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-18T19:02:13.823Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-18T17:59:02.045Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:27200: Red Hat JBoss Core Services on RHEL 7 Server, Red Hat JBoss Core Services on RHEL 8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21695: Red Hat OpenShift Container Platform 4.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13812: Middleware Containers for OpenShift\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21690: Red Hat OpenShift Container Platform 4.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:15087: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14773: Red Hat OpenShift Container Platform 4.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20087: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17596: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21656: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20040: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8868: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7310: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7666: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7080: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7675: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8339: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7123: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7670: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9711: Red Hat Enterprise Linux AppStream EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9874: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7983: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7896: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7302: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7350: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7667: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8541: Red Hat Enterprise Linux BaseOS AUS (v. 8.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8539: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8538: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8540: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8546: Red Hat Enterprise Linux BaseOS E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8545: Red Hat Enterprise Linux BaseOS E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8547: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8548: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:7668: Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:25096: Red Hat AI Inference Server 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19724: Red Hat AI Inference Server 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19725: Red Hat AI Inference Server 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16008: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16030: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16009: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16174: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14937: Red Hat Discovery 2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6190: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:9832: Red Hat Insights proxy 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:27201: Red Hat JBoss Core Services 2.4.62.SP4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11768: Red Hat Update Infrastructure 5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10065: Red Hat Update Infrastructure 5\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-18T17:59:02.045Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-27135\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2448754\", \"name\": \"RHBZ#2448754\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27135.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27200\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21695\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13812\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21690\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:15087\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14773\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20087\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17596\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21656\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20040\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8868\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7310\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7666\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7080\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7675\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8339\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7123\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7670\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9711\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9874\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7983\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7896\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7302\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7350\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7667\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8541\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8539\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8538\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8540\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8546\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8545\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8548\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7668\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25096\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19724\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19725\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16008\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16009\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16174\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14937\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6190\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:9832\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:27201\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11768\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10065\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-617\", \"description\": \"Reachable Assertion\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-06-30T12:08:08.741Z\"}}, {\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"Siemens\", \"product\": \"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\", \"versions\": [{\"status\": \"affected\", \"version\": \"V3.1.6\", \"lessThan\": \"*\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-019113.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-07-14T12:47:22.165Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-27135\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-18T18:36:41.841104Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-18T18:36:44.358Z\"}}], \"cna\": {\"title\": \"nghttp2 Denial of service: Assertion failure due to the missing state validation\", \"source\": {\"advisory\": \"GHSA-6933-cjhr-5qg6\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"nghttp2\", \"product\": \"nghttp2\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 1.68.1\"}]}], \"references\": [{\"url\": \"https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6\", \"name\": \"https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1\", \"name\": \"https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-617\", \"description\": \"CWE-617: Reachable Assertion\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-03-18T17:59:02.045Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-27135\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-14T12:47:22.165Z\", \"dateReserved\": \"2026-02-17T18:42:27.044Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-03-18T17:59:02.045Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
SUSE-SU-2026:1247-1
Vulnerability from csaf_suse - Published: 2026-04-10 10:34 - Updated: 2026-04-10 10:34Summary
Security update for nghttp2
Severity
Important
Notes
Title of the patch: Security update for nghttp2
Description of the patch: This update for nghttp2 fixes the following issue:
- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
Patchnames: SUSE-2026-1247,SUSE-SLE-Micro-5.3-2026-1247,SUSE-SLE-Micro-5.4-2026-1247,SUSE-SLE-Micro-5.5-2026-1247,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1247,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1247,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1247,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1247,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1247,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1247,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1247,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1247,SUSE-SUSE-MicroOS-5.2-2026-1247
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
101 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nghttp2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nghttp2 fixes the following issue:\n\n- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1247,SUSE-SLE-Micro-5.3-2026-1247,SUSE-SLE-Micro-5.4-2026-1247,SUSE-SLE-Micro-5.5-2026-1247,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-1247,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-1247,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-1247,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-1247,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-1247,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-1247,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-1247,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-1247,SUSE-SUSE-MicroOS-5.2-2026-1247",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1247-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1247-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261247-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1247-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045376.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259845",
"url": "https://bugzilla.suse.com/1259845"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
}
],
"title": "Security update for nghttp2",
"tracking": {
"current_release_date": "2026-04-10T10:34:43Z",
"generator": {
"date": "2026-04-10T10:34:43Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1247-1",
"initial_release_date": "2026-04-10T10:34:43Z",
"revision_history": [
{
"date": "2026-04-10T10:34:43Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"product": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"product_id": "libnghttp2-14-1.40.0-150200.22.1.aarch64"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"product": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"product_id": "libnghttp2-devel-1.40.0-150200.22.1.aarch64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"product_id": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"product": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"product_id": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150200.22.1.aarch64",
"product": {
"name": "nghttp2-1.40.0-150200.22.1.aarch64",
"product_id": "nghttp2-1.40.0-150200.22.1.aarch64"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150200.22.1.aarch64",
"product": {
"name": "python3-nghttp2-1.40.0-150200.22.1.aarch64",
"product_id": "python3-nghttp2-1.40.0-150200.22.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-64bit-1.40.0-150200.22.1.aarch64_ilp32",
"product": {
"name": "libnghttp2-14-64bit-1.40.0-150200.22.1.aarch64_ilp32",
"product_id": "libnghttp2-14-64bit-1.40.0-150200.22.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-64bit-1.40.0-150200.22.1.aarch64_ilp32",
"product": {
"name": "libnghttp2_asio1-64bit-1.40.0-150200.22.1.aarch64_ilp32",
"product_id": "libnghttp2_asio1-64bit-1.40.0-150200.22.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150200.22.1.i586",
"product": {
"name": "libnghttp2-14-1.40.0-150200.22.1.i586",
"product_id": "libnghttp2-14-1.40.0-150200.22.1.i586"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150200.22.1.i586",
"product": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.i586",
"product_id": "libnghttp2-devel-1.40.0-150200.22.1.i586"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.i586",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.i586",
"product_id": "libnghttp2_asio-devel-1.40.0-150200.22.1.i586"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150200.22.1.i586",
"product": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.i586",
"product_id": "libnghttp2_asio1-1.40.0-150200.22.1.i586"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150200.22.1.i586",
"product": {
"name": "nghttp2-1.40.0-150200.22.1.i586",
"product_id": "nghttp2-1.40.0-150200.22.1.i586"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150200.22.1.i586",
"product": {
"name": "python3-nghttp2-1.40.0-150200.22.1.i586",
"product_id": "python3-nghttp2-1.40.0-150200.22.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"product": {
"name": "libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"product_id": "libnghttp2-14-1.40.0-150200.22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"product": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"product_id": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"product_id": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"product": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"product_id": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150200.22.1.ppc64le",
"product": {
"name": "nghttp2-1.40.0-150200.22.1.ppc64le",
"product_id": "nghttp2-1.40.0-150200.22.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150200.22.1.ppc64le",
"product": {
"name": "python3-nghttp2-1.40.0-150200.22.1.ppc64le",
"product_id": "python3-nghttp2-1.40.0-150200.22.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150200.22.1.s390x",
"product": {
"name": "libnghttp2-14-1.40.0-150200.22.1.s390x",
"product_id": "libnghttp2-14-1.40.0-150200.22.1.s390x"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150200.22.1.s390x",
"product": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.s390x",
"product_id": "libnghttp2-devel-1.40.0-150200.22.1.s390x"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"product_id": "libnghttp2_asio-devel-1.40.0-150200.22.1.s390x"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"product": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"product_id": "libnghttp2_asio1-1.40.0-150200.22.1.s390x"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150200.22.1.s390x",
"product": {
"name": "nghttp2-1.40.0-150200.22.1.s390x",
"product_id": "nghttp2-1.40.0-150200.22.1.s390x"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150200.22.1.s390x",
"product": {
"name": "python3-nghttp2-1.40.0-150200.22.1.s390x",
"product_id": "python3-nghttp2-1.40.0-150200.22.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"product": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"product_id": "libnghttp2-14-1.40.0-150200.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"product": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"product_id": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"product": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"product_id": "libnghttp2-devel-1.40.0-150200.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"product_id": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"product": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"product_id": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-32bit-1.40.0-150200.22.1.x86_64",
"product": {
"name": "libnghttp2_asio1-32bit-1.40.0-150200.22.1.x86_64",
"product_id": "libnghttp2_asio1-32bit-1.40.0-150200.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150200.22.1.x86_64",
"product": {
"name": "nghttp2-1.40.0-150200.22.1.x86_64",
"product_id": "nghttp2-1.40.0-150200.22.1.x86_64"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150200.22.1.x86_64",
"product": {
"name": "python3-nghttp2-1.40.0-150200.22.1.x86_64",
"product_id": "python3-nghttp2-1.40.0-150200.22.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.3",
"product": {
"name": "SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.4",
"product": {
"name": "SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.5",
"product": {
"name": "SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.2",
"product": {
"name": "SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-microos:5.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Micro 5.5",
"product_id": "SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.s390x"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150200.22.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
"product_id": "SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150200.22.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.2:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.3:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.4:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Micro 5.5:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:libnghttp2_asio1-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-14-32bit-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio-devel-1.40.0-150200.22.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:libnghttp2_asio1-1.40.0-150200.22.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-10T10:34:43Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
}
]
}
SUSE-SU-2026:1350-1
Vulnerability from csaf_suse - Published: 2026-04-15 13:36 - Updated: 2026-04-15 13:36Summary
Security update for nghttp2
Severity
Important
Notes
Title of the patch: Security update for nghttp2
Description of the patch: This update for nghttp2 fixes the following issue:
- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
Patchnames: SUSE-2026-1350,SUSE-SLE-Module-Basesystem-15-SP7-2026-1350,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1350,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1350,openSUSE-SLE-15.6-2026-1350
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
60 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nghttp2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nghttp2 fixes the following issue:\n\n- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-1350,SUSE-SLE-Module-Basesystem-15-SP7-2026-1350,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-1350,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-1350,openSUSE-SLE-15.6-2026-1350",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1350-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:1350-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261350-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:1350-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045565.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259845",
"url": "https://bugzilla.suse.com/1259845"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
}
],
"title": "Security update for nghttp2",
"tracking": {
"current_release_date": "2026-04-15T13:36:21Z",
"generator": {
"date": "2026-04-15T13:36:21Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:1350-1",
"initial_release_date": "2026-04-15T13:36:21Z",
"revision_history": [
{
"date": "2026-04-15T13:36:21Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"product": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"product_id": "libnghttp2-14-1.40.0-150600.25.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"product": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"product_id": "libnghttp2-devel-1.40.0-150600.25.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"product_id": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"product": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"product_id": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150600.25.5.1.aarch64",
"product": {
"name": "nghttp2-1.40.0-150600.25.5.1.aarch64",
"product_id": "nghttp2-1.40.0-150600.25.5.1.aarch64"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150600.25.5.1.aarch64",
"product": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.aarch64",
"product_id": "python3-nghttp2-1.40.0-150600.25.5.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-64bit-1.40.0-150600.25.5.1.aarch64_ilp32",
"product": {
"name": "libnghttp2-14-64bit-1.40.0-150600.25.5.1.aarch64_ilp32",
"product_id": "libnghttp2-14-64bit-1.40.0-150600.25.5.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-64bit-1.40.0-150600.25.5.1.aarch64_ilp32",
"product": {
"name": "libnghttp2_asio1-64bit-1.40.0-150600.25.5.1.aarch64_ilp32",
"product_id": "libnghttp2_asio1-64bit-1.40.0-150600.25.5.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150600.25.5.1.i586",
"product": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.i586",
"product_id": "libnghttp2-14-1.40.0-150600.25.5.1.i586"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.i586",
"product": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.i586",
"product_id": "libnghttp2-devel-1.40.0-150600.25.5.1.i586"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.i586",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.i586",
"product_id": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.i586"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.i586",
"product": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.i586",
"product_id": "libnghttp2_asio1-1.40.0-150600.25.5.1.i586"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150600.25.5.1.i586",
"product": {
"name": "nghttp2-1.40.0-150600.25.5.1.i586",
"product_id": "nghttp2-1.40.0-150600.25.5.1.i586"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150600.25.5.1.i586",
"product": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.i586",
"product_id": "python3-nghttp2-1.40.0-150600.25.5.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"product": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"product_id": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"product": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"product_id": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"product_id": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"product": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"product_id": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150600.25.5.1.ppc64le",
"product": {
"name": "nghttp2-1.40.0-150600.25.5.1.ppc64le",
"product_id": "nghttp2-1.40.0-150600.25.5.1.ppc64le"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150600.25.5.1.ppc64le",
"product": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.ppc64le",
"product_id": "python3-nghttp2-1.40.0-150600.25.5.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"product": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"product_id": "libnghttp2-14-1.40.0-150600.25.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"product": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"product_id": "libnghttp2-devel-1.40.0-150600.25.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"product_id": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"product": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"product_id": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150600.25.5.1.s390x",
"product": {
"name": "nghttp2-1.40.0-150600.25.5.1.s390x",
"product_id": "nghttp2-1.40.0-150600.25.5.1.s390x"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150600.25.5.1.s390x",
"product": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.s390x",
"product_id": "python3-nghttp2-1.40.0-150600.25.5.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"product": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"product_id": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"product": {
"name": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"product_id": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"product": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"product_id": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"product": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"product_id": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"product": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"product_id": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64",
"product": {
"name": "libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64",
"product_id": "libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "nghttp2-1.40.0-150600.25.5.1.x86_64",
"product": {
"name": "nghttp2-1.40.0-150600.25.5.1.x86_64",
"product_id": "nghttp2-1.40.0-150600.25.5.1.x86_64"
}
},
{
"category": "product_version",
"name": "python3-nghttp2-1.40.0-150600.25.5.1.x86_64",
"product": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.x86_64",
"product_id": "python3-nghttp2-1.40.0-150600.25.5.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.6",
"product": {
"name": "openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.40.0-150600.25.5.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "nghttp2-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.40.0-150600.25.5.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "nghttp2-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.40.0-150600.25.5.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "nghttp2-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.40.0-150600.25.5.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "nghttp2-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.aarch64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.aarch64"
},
"product_reference": "python3-nghttp2-1.40.0-150600.25.5.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.ppc64le as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.ppc64le"
},
"product_reference": "python3-nghttp2-1.40.0-150600.25.5.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.s390x as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.s390x"
},
"product_reference": "python3-nghttp2-1.40.0-150600.25.5.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-nghttp2-1.40.0-150600.25.5.1.x86_64 as component of openSUSE Leap 15.6",
"product_id": "openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.x86_64"
},
"product_reference": "python3-nghttp2-1.40.0-150600.25.5.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Module for Basesystem 15 SP7:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2-14-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-14-32bit-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2-devel-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2_asio-devel-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:libnghttp2_asio1-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:libnghttp2_asio1-32bit-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:nghttp2-1.40.0-150600.25.5.1.x86_64",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.aarch64",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.ppc64le",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.s390x",
"openSUSE Leap 15.6:python3-nghttp2-1.40.0-150600.25.5.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-04-15T13:36:21Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
}
]
}
SUSE-SU-2026:20833-1
Vulnerability from csaf_suse - Published: 2026-03-24 12:31 - Updated: 2026-03-24 12:31Summary
Security update for nghttp2
Severity
Important
Notes
Title of the patch: Security update for nghttp2
Description of the patch: This update for nghttp2 fixes the following issue:
- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
Patchnames: SUSE-SL-Micro-6.2-432
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nghttp2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nghttp2 fixes the following issue:\n\n- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SL-Micro-6.2-432",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20833-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:20833-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620833-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:20833-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/025004.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259845",
"url": "https://bugzilla.suse.com/1259845"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
}
],
"title": "Security update for nghttp2",
"tracking": {
"current_release_date": "2026-03-24T12:31:51Z",
"generator": {
"date": "2026-03-24T12:31:51Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:20833-1",
"initial_release_date": "2026-03-24T12:31:51Z",
"revision_history": [
{
"date": "2026-03-24T12:31:51Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.64.0-160000.3.1.aarch64",
"product": {
"name": "libnghttp2-14-1.64.0-160000.3.1.aarch64",
"product_id": "libnghttp2-14-1.64.0-160000.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"product": {
"name": "libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"product_id": "libnghttp2-14-1.64.0-160000.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.64.0-160000.3.1.s390x",
"product": {
"name": "libnghttp2-14-1.64.0-160000.3.1.s390x",
"product_id": "libnghttp2-14-1.64.0-160000.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.64.0-160000.3.1.x86_64",
"product": {
"name": "libnghttp2-14-1.64.0-160000.3.1.x86_64",
"product_id": "libnghttp2-14-1.64.0-160000.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.2",
"product": {
"name": "SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:transactional"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.aarch64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.aarch64"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.ppc64le as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.s390x as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.s390x"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.x86_64 as component of SUSE Linux Micro 6.2",
"product_id": "SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.x86_64"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Micro 6.2:libnghttp2-14-1.64.0-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-24T12:31:51Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
}
]
}
SUSE-SU-2026:20870-1
Vulnerability from csaf_suse - Published: 2026-03-26 09:10 - Updated: 2026-03-26 09:10Summary
Security update for nghttp2
Severity
Important
Notes
Title of the patch: Security update for nghttp2
Description of the patch: This update for nghttp2 fixes the following issue:
- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
Patchnames: SUSE-SLE-Micro-6.0-644
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nghttp2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nghttp2 fixes the following issue:\n\n- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-644",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20870-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:20870-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620870-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:20870-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024971.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259845",
"url": "https://bugzilla.suse.com/1259845"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
}
],
"title": "Security update for nghttp2",
"tracking": {
"current_release_date": "2026-03-26T09:10:44Z",
"generator": {
"date": "2026-03-26T09:10:44Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:20870-1",
"initial_release_date": "2026-03-26T09:10:44Z",
"revision_history": [
{
"date": "2026-03-26T09:10:44Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.52.0-6.1.aarch64",
"product": {
"name": "libnghttp2-14-1.52.0-6.1.aarch64",
"product_id": "libnghttp2-14-1.52.0-6.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.52.0-6.1.s390x",
"product": {
"name": "libnghttp2-14-1.52.0-6.1.s390x",
"product_id": "libnghttp2-14-1.52.0-6.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.52.0-6.1.x86_64",
"product": {
"name": "libnghttp2-14-1.52.0-6.1.x86_64",
"product_id": "libnghttp2-14-1.52.0-6.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.52.0-6.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.aarch64"
},
"product_reference": "libnghttp2-14-1.52.0-6.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.52.0-6.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.s390x"
},
"product_reference": "libnghttp2-14-1.52.0-6.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.52.0-6.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.x86_64"
},
"product_reference": "libnghttp2-14-1.52.0-6.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.aarch64",
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.s390x",
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.aarch64",
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.s390x",
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.aarch64",
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.s390x",
"SUSE Linux Micro 6.0:libnghttp2-14-1.52.0-6.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-26T09:10:44Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
}
]
}
SUSE-SU-2026:20925-1
Vulnerability from csaf_suse - Published: 2026-03-24 12:31 - Updated: 2026-03-24 12:31Summary
Security update for nghttp2
Severity
Important
Notes
Title of the patch: Security update for nghttp2
Description of the patch: This update for nghttp2 fixes the following issue:
- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
Patchnames: SUSE-SLES-16.0-432
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nghttp2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nghttp2 fixes the following issue:\n\n- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-432",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20925-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:20925-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620925-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:20925-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045227.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259845",
"url": "https://bugzilla.suse.com/1259845"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
}
],
"title": "Security update for nghttp2",
"tracking": {
"current_release_date": "2026-03-24T12:31:51Z",
"generator": {
"date": "2026-03-24T12:31:51Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:20925-1",
"initial_release_date": "2026-03-24T12:31:51Z",
"revision_history": [
{
"date": "2026-03-24T12:31:51Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.64.0-160000.3.1.aarch64",
"product": {
"name": "libnghttp2-14-1.64.0-160000.3.1.aarch64",
"product_id": "libnghttp2-14-1.64.0-160000.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"product": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"product_id": "libnghttp2-devel-1.64.0-160000.3.1.aarch64"
}
},
{
"category": "product_version",
"name": "nghttp2-1.64.0-160000.3.1.aarch64",
"product": {
"name": "nghttp2-1.64.0-160000.3.1.aarch64",
"product_id": "nghttp2-1.64.0-160000.3.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"product": {
"name": "libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"product_id": "libnghttp2-14-1.64.0-160000.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"product": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"product_id": "libnghttp2-devel-1.64.0-160000.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nghttp2-1.64.0-160000.3.1.ppc64le",
"product": {
"name": "nghttp2-1.64.0-160000.3.1.ppc64le",
"product_id": "nghttp2-1.64.0-160000.3.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.64.0-160000.3.1.s390x",
"product": {
"name": "libnghttp2-14-1.64.0-160000.3.1.s390x",
"product_id": "libnghttp2-14-1.64.0-160000.3.1.s390x"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.64.0-160000.3.1.s390x",
"product": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.s390x",
"product_id": "libnghttp2-devel-1.64.0-160000.3.1.s390x"
}
},
{
"category": "product_version",
"name": "nghttp2-1.64.0-160000.3.1.s390x",
"product": {
"name": "nghttp2-1.64.0-160000.3.1.s390x",
"product_id": "nghttp2-1.64.0-160000.3.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.64.0-160000.3.1.x86_64",
"product": {
"name": "libnghttp2-14-1.64.0-160000.3.1.x86_64",
"product_id": "libnghttp2-14-1.64.0-160000.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"product": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"product_id": "libnghttp2-devel-1.64.0-160000.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "nghttp2-1.64.0-160000.3.1.x86_64",
"product": {
"name": "nghttp2-1.64.0-160000.3.1.x86_64",
"product_id": "nghttp2-1.64.0-160000.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x"
},
"product_reference": "libnghttp2-devel-1.64.0-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.64.0-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.aarch64"
},
"product_reference": "nghttp2-1.64.0-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.64.0-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.ppc64le"
},
"product_reference": "nghttp2-1.64.0-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.64.0-160000.3.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.s390x"
},
"product_reference": "nghttp2-1.64.0-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.64.0-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.x86_64"
},
"product_reference": "nghttp2-1.64.0-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.64.0-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64"
},
"product_reference": "libnghttp2-14-1.64.0-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64"
},
"product_reference": "libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le"
},
"product_reference": "libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x"
},
"product_reference": "libnghttp2-devel-1.64.0-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-devel-1.64.0-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64"
},
"product_reference": "libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.64.0-160000.3.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.aarch64"
},
"product_reference": "nghttp2-1.64.0-160000.3.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.64.0-160000.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.ppc64le"
},
"product_reference": "nghttp2-1.64.0-160000.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.64.0-160000.3.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.s390x"
},
"product_reference": "nghttp2-1.64.0-160000.3.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nghttp2-1.64.0-160000.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.x86_64"
},
"product_reference": "nghttp2-1.64.0-160000.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server 16.0:nghttp2-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-14-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:libnghttp2-devel-1.64.0-160000.3.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nghttp2-1.64.0-160000.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-24T12:31:51Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
}
]
}
SUSE-SU-2026:20950-1
Vulnerability from csaf_suse - Published: 2026-03-27 09:43 - Updated: 2026-03-27 09:43Summary
Security update for nghttp2
Severity
Important
Notes
Title of the patch: Security update for nghttp2
Description of the patch: This update for nghttp2 fixes the following issue:
- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).
Patchnames: SUSE-SLE-Micro-6.0-645,SUSE-SLE-Micro-6.1-464
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-309-9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-309-9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-309-9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-networkmanager-309-9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-selinux-309-9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-storaged-309-9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-system-309-9.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-ws-309-9.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-ws-309-9.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:cockpit-ws-309-9.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
8 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nghttp2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nghttp2 fixes the following issue:\n\n- CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-645,SUSE-SLE-Micro-6.1-464",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20950-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:20950-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620950-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:20950-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045289.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259845",
"url": "https://bugzilla.suse.com/1259845"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
}
],
"title": "Security update for nghttp2",
"tracking": {
"current_release_date": "2026-03-27T09:43:31Z",
"generator": {
"date": "2026-03-27T09:43:31Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:20950-1",
"initial_release_date": "2026-03-27T09:43:31Z",
"revision_history": [
{
"date": "2026-03-27T09:43:31Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cockpit-309-9.1.aarch64",
"product": {
"name": "cockpit-309-9.1.aarch64",
"product_id": "cockpit-309-9.1.aarch64"
}
},
{
"category": "product_version",
"name": "cockpit-bridge-309-9.1.aarch64",
"product": {
"name": "cockpit-bridge-309-9.1.aarch64",
"product_id": "cockpit-bridge-309-9.1.aarch64"
}
},
{
"category": "product_version",
"name": "cockpit-ws-309-9.1.aarch64",
"product": {
"name": "cockpit-ws-309-9.1.aarch64",
"product_id": "cockpit-ws-309-9.1.aarch64"
}
},
{
"category": "product_version",
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64",
"product": {
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64",
"product_id": "libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-networkmanager-309-9.1.noarch",
"product": {
"name": "cockpit-networkmanager-309-9.1.noarch",
"product_id": "cockpit-networkmanager-309-9.1.noarch"
}
},
{
"category": "product_version",
"name": "cockpit-selinux-309-9.1.noarch",
"product": {
"name": "cockpit-selinux-309-9.1.noarch",
"product_id": "cockpit-selinux-309-9.1.noarch"
}
},
{
"category": "product_version",
"name": "cockpit-storaged-309-9.1.noarch",
"product": {
"name": "cockpit-storaged-309-9.1.noarch",
"product_id": "cockpit-storaged-309-9.1.noarch"
}
},
{
"category": "product_version",
"name": "cockpit-system-309-9.1.noarch",
"product": {
"name": "cockpit-system-309-9.1.noarch",
"product_id": "cockpit-system-309-9.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le",
"product": {
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le",
"product_id": "libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-309-9.1.s390x",
"product": {
"name": "cockpit-309-9.1.s390x",
"product_id": "cockpit-309-9.1.s390x"
}
},
{
"category": "product_version",
"name": "cockpit-bridge-309-9.1.s390x",
"product": {
"name": "cockpit-bridge-309-9.1.s390x",
"product_id": "cockpit-bridge-309-9.1.s390x"
}
},
{
"category": "product_version",
"name": "cockpit-ws-309-9.1.s390x",
"product": {
"name": "cockpit-ws-309-9.1.s390x",
"product_id": "cockpit-ws-309-9.1.s390x"
}
},
{
"category": "product_version",
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x",
"product": {
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x",
"product_id": "libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cockpit-309-9.1.x86_64",
"product": {
"name": "cockpit-309-9.1.x86_64",
"product_id": "cockpit-309-9.1.x86_64"
}
},
{
"category": "product_version",
"name": "cockpit-bridge-309-9.1.x86_64",
"product": {
"name": "cockpit-bridge-309-9.1.x86_64",
"product_id": "cockpit-bridge-309-9.1.x86_64"
}
},
{
"category": "product_version",
"name": "cockpit-ws-309-9.1.x86_64",
"product": {
"name": "cockpit-ws-309-9.1.x86_64",
"product_id": "cockpit-ws-309-9.1.x86_64"
}
},
{
"category": "product_version",
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64",
"product": {
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64",
"product_id": "libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-309-9.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-309-9.1.aarch64"
},
"product_reference": "cockpit-309-9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-309-9.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-309-9.1.s390x"
},
"product_reference": "cockpit-309-9.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-309-9.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-309-9.1.x86_64"
},
"product_reference": "cockpit-309-9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-bridge-309-9.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.aarch64"
},
"product_reference": "cockpit-bridge-309-9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-bridge-309-9.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.s390x"
},
"product_reference": "cockpit-bridge-309-9.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-bridge-309-9.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.x86_64"
},
"product_reference": "cockpit-bridge-309-9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-networkmanager-309-9.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-networkmanager-309-9.1.noarch"
},
"product_reference": "cockpit-networkmanager-309-9.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-selinux-309-9.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-selinux-309-9.1.noarch"
},
"product_reference": "cockpit-selinux-309-9.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-storaged-309-9.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-storaged-309-9.1.noarch"
},
"product_reference": "cockpit-storaged-309-9.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-system-309-9.1.noarch as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-system-309-9.1.noarch"
},
"product_reference": "cockpit-system-309-9.1.noarch",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-309-9.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-ws-309-9.1.aarch64"
},
"product_reference": "cockpit-ws-309-9.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-309-9.1.s390x as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-ws-309-9.1.s390x"
},
"product_reference": "cockpit-ws-309-9.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cockpit-ws-309-9.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:cockpit-ws-309-9.1.x86_64"
},
"product_reference": "cockpit-ws-309-9.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64"
},
"product_reference": "libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le"
},
"product_reference": "libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x"
},
"product_reference": "libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64"
},
"product_reference": "libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:cockpit-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-309-9.1.x86_64",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.x86_64",
"SUSE Linux Micro 6.0:cockpit-networkmanager-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-selinux-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-storaged-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-system-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.x86_64",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:cockpit-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-309-9.1.x86_64",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.x86_64",
"SUSE Linux Micro 6.0:cockpit-networkmanager-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-selinux-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-storaged-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-system-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.x86_64",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:cockpit-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-309-9.1.x86_64",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-bridge-309-9.1.x86_64",
"SUSE Linux Micro 6.0:cockpit-networkmanager-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-selinux-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-storaged-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-system-309-9.1.noarch",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.aarch64",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.s390x",
"SUSE Linux Micro 6.0:cockpit-ws-309-9.1.x86_64",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.aarch64",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.ppc64le",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.s390x",
"SUSE Linux Micro 6.1:libnghttp2-14-1.52.0-slfo.1.1_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-03-27T09:43:31Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
}
]
}
SUSE-SU-2026:22368-1
Vulnerability from csaf_suse - Published: 2026-06-25 12:57 - Updated: 2026-06-25 12:57Summary
Security update for nodejs22
Severity
Important
Notes
Title of the patch: Security update for nodejs22
Description of the patch: This update for nodejs22 fixes the following issues
Update to 22.23.0:
- CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response
delivery (bsc#1268479).
- CVE-2026-9496: pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec`
value can lead to DoS (bsc#1266318).
- CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
- CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
(bsc#1268481).
- CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).
- CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths
and can cause a denial of service (bsc#1256576).
- CVE-2026-21710: uncaught TypeError exception can cause a denial of service (bsc#1260455).
- CVE-2026-21713: timing side-channel in HMAC verification via memcmp can lead to potential MAC forgery (bsc#1260463).
- CVE-2026-21714: WINDOW_UPDATE frames on stream 0 can lead to memory leak (bsc#1260480).
- CVE-2026-21715: permission model bypass in realpathSync.native can allow file existence disclosure (bsc#1260482).
- CVE-2026-21716: promise-based FileHandle methods can be used to modify file permissions and ownership (bsc#1260462).
- CVE-2026-21717: crafted request can lead to hash collisions trivially predictable (bsc#1260494).
- CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
- CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
- CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
- CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
- CVE-2026-48617: permission model enforcement bypass via `process.report.writeReport()` path misvalidation
(bsc#1268554).
- CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to
resolver and verifier hostname normalization mismatch (bsc#1268593).
- CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
- CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname
matching (bsc#1268605).
- CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver
bindings (bsc#1268606).
- CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).
- CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).
- CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to
unauthorized connections (bsc#1268608).
- CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
- CVE-2026-48937: servers keep accepting data even after sending a `GOAWAY` frame (bsc#1268555).
Patchnames: SUSE-SLES-16.0-1079
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.9 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.6 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
4.4 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
34 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
113 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nodejs22",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nodejs22 fixes the following issues\n\nUpdate to 22.23.0:\n\n- CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response\n delivery (bsc#1268479).\n- CVE-2026-9496: pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec`\n value can lead to DoS (bsc#1266318).\n- CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).\n- CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header\n (bsc#1268481).\n- CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).\n- CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths\n and can cause a denial of service (bsc#1256576).\n- CVE-2026-21710: uncaught TypeError exception can cause a denial of service (bsc#1260455).\n- CVE-2026-21713: timing side-channel in HMAC verification via memcmp can lead to potential MAC forgery (bsc#1260463).\n- CVE-2026-21714: WINDOW_UPDATE frames on stream 0 can lead to memory leak (bsc#1260480).\n- CVE-2026-21715: permission model bypass in realpathSync.native can allow file existence disclosure (bsc#1260482).\n- CVE-2026-21716: promise-based FileHandle methods can be used to modify file permissions and ownership (bsc#1260462).\n- CVE-2026-21717: crafted request can lead to hash collisions trivially predictable (bsc#1260494).\n- CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).\n- CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).\n- CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).\n- CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).\n- CVE-2026-48617: permission model enforcement bypass via `process.report.writeReport()` path misvalidation\n (bsc#1268554).\n- CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to\n resolver and verifier hostname normalization mismatch (bsc#1268593).\n- CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).\n- CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname\n matching (bsc#1268605).\n- CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver\n bindings (bsc#1268606).\n- CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).\n- CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).\n- CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to\n unauthorized connections (bsc#1268608).\n- CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).\n- CVE-2026-48937: servers keep accepting data even after sending a `GOAWAY` frame (bsc#1268555).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-1079",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22368-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22368-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622368-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22368-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047771.html"
},
{
"category": "self",
"summary": "SUSE Bug 1256576",
"url": "https://bugzilla.suse.com/1256576"
},
{
"category": "self",
"summary": "SUSE Bug 1259853",
"url": "https://bugzilla.suse.com/1259853"
},
{
"category": "self",
"summary": "SUSE Bug 1260455",
"url": "https://bugzilla.suse.com/1260455"
},
{
"category": "self",
"summary": "SUSE Bug 1260462",
"url": "https://bugzilla.suse.com/1260462"
},
{
"category": "self",
"summary": "SUSE Bug 1260463",
"url": "https://bugzilla.suse.com/1260463"
},
{
"category": "self",
"summary": "SUSE Bug 1260480",
"url": "https://bugzilla.suse.com/1260480"
},
{
"category": "self",
"summary": "SUSE Bug 1260482",
"url": "https://bugzilla.suse.com/1260482"
},
{
"category": "self",
"summary": "SUSE Bug 1260494",
"url": "https://bugzilla.suse.com/1260494"
},
{
"category": "self",
"summary": "SUSE Bug 1262274",
"url": "https://bugzilla.suse.com/1262274"
},
{
"category": "self",
"summary": "SUSE Bug 1266318",
"url": "https://bugzilla.suse.com/1266318"
},
{
"category": "self",
"summary": "SUSE Bug 1268097",
"url": "https://bugzilla.suse.com/1268097"
},
{
"category": "self",
"summary": "SUSE Bug 1268477",
"url": "https://bugzilla.suse.com/1268477"
},
{
"category": "self",
"summary": "SUSE Bug 1268479",
"url": "https://bugzilla.suse.com/1268479"
},
{
"category": "self",
"summary": "SUSE Bug 1268481",
"url": "https://bugzilla.suse.com/1268481"
},
{
"category": "self",
"summary": "SUSE Bug 1268482",
"url": "https://bugzilla.suse.com/1268482"
},
{
"category": "self",
"summary": "SUSE Bug 1268554",
"url": "https://bugzilla.suse.com/1268554"
},
{
"category": "self",
"summary": "SUSE Bug 1268555",
"url": "https://bugzilla.suse.com/1268555"
},
{
"category": "self",
"summary": "SUSE Bug 1268592",
"url": "https://bugzilla.suse.com/1268592"
},
{
"category": "self",
"summary": "SUSE Bug 1268593",
"url": "https://bugzilla.suse.com/1268593"
},
{
"category": "self",
"summary": "SUSE Bug 1268598",
"url": "https://bugzilla.suse.com/1268598"
},
{
"category": "self",
"summary": "SUSE Bug 1268605",
"url": "https://bugzilla.suse.com/1268605"
},
{
"category": "self",
"summary": "SUSE Bug 1268606",
"url": "https://bugzilla.suse.com/1268606"
},
{
"category": "self",
"summary": "SUSE Bug 1268608",
"url": "https://bugzilla.suse.com/1268608"
},
{
"category": "self",
"summary": "SUSE Bug 1268609",
"url": "https://bugzilla.suse.com/1268609"
},
{
"category": "self",
"summary": "SUSE Bug 1268611",
"url": "https://bugzilla.suse.com/1268611"
},
{
"category": "self",
"summary": "SUSE Bug 1268618",
"url": "https://bugzilla.suse.com/1268618"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11525 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12151 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21637 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21710 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21710/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21713 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21714 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21715 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21715/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21716 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21716/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21717 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-40170 page",
"url": "https://www.suse.com/security/cve/CVE-2026-40170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42338 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48615 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48617 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48618 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48619 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48928 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48930 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48931 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48933 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48935 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48937 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6733 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9496 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9679/"
}
],
"title": "Security update for nodejs22",
"tracking": {
"current_release_date": "2026-06-25T12:57:12Z",
"generator": {
"date": "2026-06-25T12:57:12Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22368-1",
"initial_release_date": "2026-06-25T12:57:12Z",
"revision_history": [
{
"date": "2026-06-25T12:57:12Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-160000.1.1.aarch64",
"product": {
"name": "corepack22-22.23.0-160000.1.1.aarch64",
"product_id": "corepack22-22.23.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-160000.1.1.aarch64",
"product": {
"name": "nodejs22-22.23.0-160000.1.1.aarch64",
"product_id": "nodejs22-22.23.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-160000.1.1.aarch64",
"product": {
"name": "nodejs22-devel-22.23.0-160000.1.1.aarch64",
"product_id": "nodejs22-devel-22.23.0-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-160000.1.1.aarch64",
"product": {
"name": "npm22-22.23.0-160000.1.1.aarch64",
"product_id": "npm22-22.23.0-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs22-docs-22.23.0-160000.1.1.noarch",
"product": {
"name": "nodejs22-docs-22.23.0-160000.1.1.noarch",
"product_id": "nodejs22-docs-22.23.0-160000.1.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-160000.1.1.ppc64le",
"product": {
"name": "corepack22-22.23.0-160000.1.1.ppc64le",
"product_id": "corepack22-22.23.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-160000.1.1.ppc64le",
"product": {
"name": "nodejs22-22.23.0-160000.1.1.ppc64le",
"product_id": "nodejs22-22.23.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"product": {
"name": "nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"product_id": "nodejs22-devel-22.23.0-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-160000.1.1.ppc64le",
"product": {
"name": "npm22-22.23.0-160000.1.1.ppc64le",
"product_id": "npm22-22.23.0-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-160000.1.1.s390x",
"product": {
"name": "corepack22-22.23.0-160000.1.1.s390x",
"product_id": "corepack22-22.23.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-160000.1.1.s390x",
"product": {
"name": "nodejs22-22.23.0-160000.1.1.s390x",
"product_id": "nodejs22-22.23.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-160000.1.1.s390x",
"product": {
"name": "nodejs22-devel-22.23.0-160000.1.1.s390x",
"product_id": "nodejs22-devel-22.23.0-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-160000.1.1.s390x",
"product": {
"name": "npm22-22.23.0-160000.1.1.s390x",
"product_id": "npm22-22.23.0-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-160000.1.1.x86_64",
"product": {
"name": "corepack22-22.23.0-160000.1.1.x86_64",
"product_id": "corepack22-22.23.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-160000.1.1.x86_64",
"product": {
"name": "nodejs22-22.23.0-160000.1.1.x86_64",
"product_id": "nodejs22-22.23.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-160000.1.1.x86_64",
"product": {
"name": "nodejs22-devel-22.23.0-160000.1.1.x86_64",
"product_id": "nodejs22-devel-22.23.0-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-160000.1.1.x86_64",
"product": {
"name": "npm22-22.23.0-160000.1.1.x86_64",
"product_id": "npm22-22.23.0-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.23.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64"
},
"product_reference": "corepack22-22.23.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.23.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le"
},
"product_reference": "corepack22-22.23.0-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.23.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x"
},
"product_reference": "corepack22-22.23.0-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.23.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64"
},
"product_reference": "corepack22-22.23.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64"
},
"product_reference": "nodejs22-22.23.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le"
},
"product_reference": "nodejs22-22.23.0-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x"
},
"product_reference": "nodejs22-22.23.0-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64"
},
"product_reference": "nodejs22-22.23.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64"
},
"product_reference": "nodejs22-devel-22.23.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le"
},
"product_reference": "nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x"
},
"product_reference": "nodejs22-devel-22.23.0-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64"
},
"product_reference": "nodejs22-devel-22.23.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.23.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch"
},
"product_reference": "nodejs22-docs-22.23.0-160000.1.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64"
},
"product_reference": "npm22-22.23.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le"
},
"product_reference": "npm22-22.23.0-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x"
},
"product_reference": "npm22-22.23.0-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64"
},
"product_reference": "npm22-22.23.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.23.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64"
},
"product_reference": "corepack22-22.23.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.23.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le"
},
"product_reference": "corepack22-22.23.0-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.23.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x"
},
"product_reference": "corepack22-22.23.0-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corepack22-22.23.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64"
},
"product_reference": "corepack22-22.23.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64"
},
"product_reference": "nodejs22-22.23.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le"
},
"product_reference": "nodejs22-22.23.0-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x"
},
"product_reference": "nodejs22-22.23.0-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64"
},
"product_reference": "nodejs22-22.23.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64"
},
"product_reference": "nodejs22-devel-22.23.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le"
},
"product_reference": "nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x"
},
"product_reference": "nodejs22-devel-22.23.0-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64"
},
"product_reference": "nodejs22-devel-22.23.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.23.0-160000.1.1.noarch as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch"
},
"product_reference": "nodejs22-docs-22.23.0-160000.1.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64"
},
"product_reference": "npm22-22.23.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le"
},
"product_reference": "npm22-22.23.0-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x"
},
"product_reference": "npm22-22.23.0-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
},
"product_reference": "npm22-22.23.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-11525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11525"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nWhen undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently mapped to one of the three standard tokens. For example, SameSite=NoneOfYourBusiness is parsed as None (the most permissive setting), and SameSite=StrictLax is parsed as Lax (a downgrade from Strict).\n\nAffected applications are those that consume Set-Cookie headers from server responses (for example via undici\u0027s fetch or proxy code paths) and then forward or rely on the parsed sameSite attribute. A malicious or non-compliant server can coerce the consumer\u0027s view of a cookie\u0027s SameSite policy to a weaker value, silently degrading the SameSite enforcement the cookie is supposed to provide.\n\nThis was introduced in undici 5.15.0 when the cookies feature was added.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nAfter parsing a Set-Cookie header, validate that the resulting sameSite attribute is one of \u0027Strict\u0027, \u0027Lax\u0027, or \u0027None\u0027 (exact, case-insensitive) before forwarding or relying on it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11525",
"url": "https://www.suse.com/security/cve/CVE-2026-11525"
},
{
"category": "external",
"summary": "SUSE Bug 1268481 for CVE-2026-11525",
"url": "https://bugzilla.suse.com/1268481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "low"
}
],
"title": "CVE-2026-11525"
},
{
"cve": "CVE-2026-12151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12151"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nThe undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service.\n\nAffected applications are those using the undici WebSocket client (new WebSocket(...)) or the WebSocketStream API that can be induced to connect to an attacker-controlled or compromised WebSocket endpoint.\n\nAll releases starting at undici 6.17.0 are affected.\n\nPatches: Upgrade to undici \u003e= 6.26.0, \u003e= 7.28.0, or \u003e= 8.5.0. Workarounds:\nNo workaround is available. The fix must be applied through an upgrade.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12151",
"url": "https://www.suse.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "SUSE Bug 1268482 for CVE-2026-12151",
"url": "https://bugzilla.suse.com/1268482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-12151"
},
{
"cve": "CVE-2026-21637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21637"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21637",
"url": "https://www.suse.com/security/cve/CVE-2026-21637"
},
{
"category": "external",
"summary": "SUSE Bug 1256576 for CVE-2026-21637",
"url": "https://bugzilla.suse.com/1256576"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21637",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-21637"
},
{
"cve": "CVE-2026-21710",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21710"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`.\r\n\r\nWhen this occurs, `dest[\"__proto__\"]` resolves to `Object.prototype` rather than `undefined`, causing `.push()` to be called on a non-array. This exception is thrown synchronously inside a property getter and cannot be intercepted by `error` event listeners, meaning it cannot be handled without wrapping every `req.headersDistinct` access in a `try/catch`.\r\n\r\n* This vulnerability affects all Node.js HTTP servers on **20.x, 22.x, 24.x, and v25.x**",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21710",
"url": "https://www.suse.com/security/cve/CVE-2026-21710"
},
{
"category": "external",
"summary": "SUSE Bug 1260455 for CVE-2026-21710",
"url": "https://bugzilla.suse.com/1260455"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21710",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "important"
}
],
"title": "CVE-2026-21710"
},
{
"cve": "CVE-2026-21713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21713"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior could be exploited as a timing oracle to infer HMAC values.\r\n\r\nNode.js already provides timing-safe comparison primitives used elsewhere in the codebase, indicating this is an oversight rather than an intentional design decision.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21713",
"url": "https://www.suse.com/security/cve/CVE-2026-21713"
},
{
"category": "external",
"summary": "SUSE Bug 1260463 for CVE-2026-21713",
"url": "https://bugzilla.suse.com/1260463"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21713",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-21713"
},
{
"cve": "CVE-2026-21714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21714"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the maximum value of 2-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up.\r\n\r\nThis vulnerability affects HTTP2 users on Node.js 20, 22, 24 and 25.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21714",
"url": "https://www.suse.com/security/cve/CVE-2026-21714"
},
{
"category": "external",
"summary": "SUSE Bug 1260480 for CVE-2026-21714",
"url": "https://bugzilla.suse.com/1260480"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21714",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-21714"
},
{
"cve": "CVE-2026-21715",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21715"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync.native()` without the required read permission checks, while all comparable filesystem functions correctly enforce them.\r\n\r\nAs a result, code running under `--permission` with restricted `--allow-fs-read` can still use `fs.realpathSync.native()` to check file existence, resolve symlink targets, and enumerate filesystem paths outside of permitted directories.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x** processes using the Permission Model where `--allow-fs-read` is intentionally restricted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21715",
"url": "https://www.suse.com/security/cve/CVE-2026-21715"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21715",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "low"
}
],
"title": "CVE-2026-21715"
},
{
"cve": "CVE-2026-21716",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21716"
}
],
"notes": [
{
"category": "general",
"text": "An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permission checks, while their callback-based equivalents (`fs.fchmod()`, `fs.fchown()`) were correctly patched.\r\n\r\nAs a result, code running under `--permission` with restricted `--allow-fs-write` can still use promise-based `FileHandle` methods to modify file permissions and ownership on already-open file descriptors, bypassing the intended write restrictions.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x** processes using the Permission Model where `--allow-fs-write` is intentionally restricted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21716",
"url": "https://www.suse.com/security/cve/CVE-2026-21716"
},
{
"category": "external",
"summary": "SUSE Bug 1260462 for CVE-2026-21716",
"url": "https://bugzilla.suse.com/1260462"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21716",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-21716"
},
{
"cve": "CVE-2026-21717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21717"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in V8\u0027s string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8\u0027s internal string table, an attacker can significantly degrade performance of the Node.js process.\r\n\r\nThe most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21717",
"url": "https://www.suse.com/security/cve/CVE-2026-21717"
},
{
"category": "external",
"summary": "SUSE Bug 1260494 for CVE-2026-21717",
"url": "https://bugzilla.suse.com/1260494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-21717"
},
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
},
{
"cve": "CVE-2026-40170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-40170"
}
],
"notes": [
{
"category": "general",
"text": "ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-40170",
"url": "https://www.suse.com/security/cve/CVE-2026-40170"
},
{
"category": "external",
"summary": "SUSE Bug 1262273 for CVE-2026-40170",
"url": "https://bugzilla.suse.com/1262273"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "important"
}
],
"title": "CVE-2026-40170"
},
{
"cve": "CVE-2026-42338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42338"
}
],
"notes": [
{
"category": "general",
"text": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressError.parseMessage (emitted by the Address6 constructor for invalid input) can contain unescaped attacker-controlled content in one branch. An application that (1) passes untrusted input to Address6 and (2) renders the output of these methods, or the thrown error\u0027s parseMessage, as HTML (e.g. via innerHTML) is vulnerable to cross-site scripting. This vulnerability is fixed in 10.1.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42338",
"url": "https://www.suse.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "SUSE Bug 1268097 for CVE-2026-42338",
"url": "https://bugzilla.suse.com/1268097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-42338"
},
{
"cve": "CVE-2026-48615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48615"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages.\r\n\r\nWhen proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48615",
"url": "https://www.suse.com/security/cve/CVE-2026-48615"
},
{
"category": "external",
"summary": "SUSE Bug 1268598 for CVE-2026-48615",
"url": "https://bugzilla.suse.com/1268598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "important"
}
],
"title": "CVE-2026-48615"
},
{
"cve": "CVE-2026-48617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48617"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48617",
"url": "https://www.suse.com/security/cve/CVE-2026-48617"
},
{
"category": "external",
"summary": "SUSE Bug 1268554 for CVE-2026-48617",
"url": "https://bugzilla.suse.com/1268554"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-48617"
},
{
"cve": "CVE-2026-48618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48618"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat.\r\n\r\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48618",
"url": "https://www.suse.com/security/cve/CVE-2026-48618"
},
{
"category": "external",
"summary": "SUSE Bug 1268593 for CVE-2026-48618",
"url": "https://bugzilla.suse.com/1268593"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "important"
}
],
"title": "CVE-2026-48618"
},
{
"cve": "CVE-2026-48619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48619"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48619",
"url": "https://www.suse.com/security/cve/CVE-2026-48619"
},
{
"category": "external",
"summary": "SUSE Bug 1268618 for CVE-2026-48619",
"url": "https://bugzilla.suse.com/1268618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-48619"
},
{
"cve": "CVE-2026-48928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48928"
}
],
"notes": [
{
"category": "general",
"text": "A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48928",
"url": "https://www.suse.com/security/cve/CVE-2026-48928"
},
{
"category": "external",
"summary": "SUSE Bug 1268605 for CVE-2026-48928",
"url": "https://bugzilla.suse.com/1268605"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-48928"
},
{
"cve": "CVE-2026-48930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48930"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48930",
"url": "https://www.suse.com/security/cve/CVE-2026-48930"
},
{
"category": "external",
"summary": "SUSE Bug 1268606 for CVE-2026-48930",
"url": "https://bugzilla.suse.com/1268606"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-48930"
},
{
"cve": "CVE-2026-48931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48931"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48931",
"url": "https://www.suse.com/security/cve/CVE-2026-48931"
},
{
"category": "external",
"summary": "SUSE Bug 1268611 for CVE-2026-48931",
"url": "https://bugzilla.suse.com/1268611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "low"
}
],
"title": "CVE-2026-48931"
},
{
"cve": "CVE-2026-48933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48933"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48933",
"url": "https://www.suse.com/security/cve/CVE-2026-48933"
},
{
"category": "external",
"summary": "SUSE Bug 1268592 for CVE-2026-48933",
"url": "https://bugzilla.suse.com/1268592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "important"
}
],
"title": "CVE-2026-48933"
},
{
"cve": "CVE-2026-48934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48934"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48934",
"url": "https://www.suse.com/security/cve/CVE-2026-48934"
},
{
"category": "external",
"summary": "SUSE Bug 1268608 for CVE-2026-48934",
"url": "https://bugzilla.suse.com/1268608"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-48934"
},
{
"cve": "CVE-2026-48935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48935"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. `--allow-fs-read`.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48935",
"url": "https://www.suse.com/security/cve/CVE-2026-48935"
},
{
"category": "external",
"summary": "SUSE Bug 1268609 for CVE-2026-48935",
"url": "https://bugzilla.suse.com/1268609"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-48935"
},
{
"cve": "CVE-2026-48937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48937"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This vulnerability affects two supported release lines: **Node.js 22** and **Node.js 24**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48937",
"url": "https://www.suse.com/security/cve/CVE-2026-48937"
},
{
"category": "external",
"summary": "SUSE Bug 1268555 for CVE-2026-48937",
"url": "https://bugzilla.suse.com/1268555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-48937"
},
{
"cve": "CVE-2026-6733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6733"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nUndici\u0027s HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response onto an idle socket after a request completes. When the client dispatches the next request on that socket, it associates the injected response with the new request, causing responses to be delivered to the wrong requests.\n\nThis requires an attacker-controlled or compromised upstream HTTP/1.1 server and keep-alive connection reuse.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nDisable keep-alive connection reuse by setting keepAliveTimeout: 0 on the Client or Pool.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6733",
"url": "https://www.suse.com/security/cve/CVE-2026-6733"
},
{
"category": "external",
"summary": "SUSE Bug 1268479 for CVE-2026-6733",
"url": "https://bugzilla.suse.com/1268479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "low"
}
],
"title": "CVE-2026-6733"
},
{
"cve": "CVE-2026-9496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9496"
}
],
"notes": [
{
"category": "general",
"text": "Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function\u0027s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9496",
"url": "https://www.suse.com/security/cve/CVE-2026-9496"
},
{
"category": "external",
"summary": "SUSE Bug 1266318 for CVE-2026-9496",
"url": "https://bugzilla.suse.com/1266318"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-9496"
},
{
"cve": "CVE-2026-9679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9679"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nundici\u0027s cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 5.4 does not specify any decoding and browsers do not decode either.\n\nApplications that parse a Set-Cookie header and then forward the parsed value into a response header (proxies, middleware, SSR frameworks) become vulnerable to HTTP response header injection: an attacker-controlled upstream can inject arbitrary Set-Cookie, Location, or Cache-Control headers into the application\u0027s downstream response, enabling session fixation, open redirect, or cache poisoning.\n\nAffected applications are those that use undici\u0027s cookie parsing (parseSetCookie, parseCookie, getSetCookies) and forward the parsed cookie value into a response header.\n\nThis was introduced in undici 7.0.0 via PR #3789.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nIf upgrade is not immediately possible, do not forward values returned by parseSetCookie/parseCookie/getSetCookies directly into response headers; sanitize the value first to strip or reject CR, LF, NUL, ;, and = bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9679",
"url": "https://www.suse.com/security/cve/CVE-2026-9679"
},
{
"category": "external",
"summary": "SUSE Bug 1268477 for CVE-2026-9679",
"url": "https://bugzilla.suse.com/1268477"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:npm22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:corepack22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-devel-22.23.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:nodejs22-docs-22.23.0-160000.1.1.noarch",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:npm22-22.23.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-25T12:57:12Z",
"details": "moderate"
}
],
"title": "CVE-2026-9679"
}
]
}
SUSE-SU-2026:2647-1
Vulnerability from csaf_suse - Published: 2026-06-26 10:34 - Updated: 2026-06-26 10:34Summary
Security update for nodejs22
Severity
Important
Notes
Title of the patch: Security update for nodejs22
Description of the patch: This update for nodejs22 fixes the following issues
Update to 22.23.0:
- CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response
delivery (bsc#1268479).
- CVE-2026-9496: pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec`
value can lead to DoS (bsc#1266318).
- CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
- CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
(bsc#1268481).
- CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).
- CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
- CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).
- CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).
- CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).
- CVE-2026-48617: permission model enforcement bypass via `process.report.writeReport()` path misvalidation
(bsc#1268554).
- CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to
resolver and verifier hostname normalization mismatch (bsc#1268593).
- CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
- CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname
matching (bsc#1268605).
- CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver
bindings (bsc#1268606).
- CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).
- CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).
- CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to
unauthorized connections (bsc#1268608).
- CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
- CVE-2026-48937: servers keep accepting data even after sending a `GOAWAY` frame (bsc#1268555).
Patchnames: SUSE-2026-2647,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2647,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2647
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.9 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
7.5 (High)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
80 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nodejs22",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nodejs22 fixes the following issues\n\nUpdate to 22.23.0:\n\n- CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response\n delivery (bsc#1268479).\n- CVE-2026-9496: pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec`\n value can lead to DoS (bsc#1266318).\n- CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).\n- CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header\n (bsc#1268481).\n- CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).\n- CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).\n- CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).\n- CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).\n- CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).\n- CVE-2026-48617: permission model enforcement bypass via `process.report.writeReport()` path misvalidation\n (bsc#1268554).\n- CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to\n resolver and verifier hostname normalization mismatch (bsc#1268593).\n- CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).\n- CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname\n matching (bsc#1268605).\n- CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver\n bindings (bsc#1268606).\n- CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).\n- CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).\n- CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to\n unauthorized connections (bsc#1268608).\n- CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).\n- CVE-2026-48937: servers keep accepting data even after sending a `GOAWAY` frame (bsc#1268555).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2647,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2647,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2647",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2647-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2647-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262647-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2647-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047643.html"
},
{
"category": "self",
"summary": "SUSE Bug 1259853",
"url": "https://bugzilla.suse.com/1259853"
},
{
"category": "self",
"summary": "SUSE Bug 1262274",
"url": "https://bugzilla.suse.com/1262274"
},
{
"category": "self",
"summary": "SUSE Bug 1266318",
"url": "https://bugzilla.suse.com/1266318"
},
{
"category": "self",
"summary": "SUSE Bug 1268097",
"url": "https://bugzilla.suse.com/1268097"
},
{
"category": "self",
"summary": "SUSE Bug 1268477",
"url": "https://bugzilla.suse.com/1268477"
},
{
"category": "self",
"summary": "SUSE Bug 1268479",
"url": "https://bugzilla.suse.com/1268479"
},
{
"category": "self",
"summary": "SUSE Bug 1268481",
"url": "https://bugzilla.suse.com/1268481"
},
{
"category": "self",
"summary": "SUSE Bug 1268482",
"url": "https://bugzilla.suse.com/1268482"
},
{
"category": "self",
"summary": "SUSE Bug 1268554",
"url": "https://bugzilla.suse.com/1268554"
},
{
"category": "self",
"summary": "SUSE Bug 1268555",
"url": "https://bugzilla.suse.com/1268555"
},
{
"category": "self",
"summary": "SUSE Bug 1268592",
"url": "https://bugzilla.suse.com/1268592"
},
{
"category": "self",
"summary": "SUSE Bug 1268593",
"url": "https://bugzilla.suse.com/1268593"
},
{
"category": "self",
"summary": "SUSE Bug 1268598",
"url": "https://bugzilla.suse.com/1268598"
},
{
"category": "self",
"summary": "SUSE Bug 1268605",
"url": "https://bugzilla.suse.com/1268605"
},
{
"category": "self",
"summary": "SUSE Bug 1268606",
"url": "https://bugzilla.suse.com/1268606"
},
{
"category": "self",
"summary": "SUSE Bug 1268608",
"url": "https://bugzilla.suse.com/1268608"
},
{
"category": "self",
"summary": "SUSE Bug 1268609",
"url": "https://bugzilla.suse.com/1268609"
},
{
"category": "self",
"summary": "SUSE Bug 1268611",
"url": "https://bugzilla.suse.com/1268611"
},
{
"category": "self",
"summary": "SUSE Bug 1268618",
"url": "https://bugzilla.suse.com/1268618"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11525 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12151 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-40170 page",
"url": "https://www.suse.com/security/cve/CVE-2026-40170/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42338 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42338/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48615 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48617 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48617/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48618 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48619 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48928 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48930 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48931 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48933 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48935 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48937 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6733 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9496 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9496/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9679/"
}
],
"title": "Security update for nodejs22",
"tracking": {
"current_release_date": "2026-06-26T10:34:05Z",
"generator": {
"date": "2026-06-26T10:34:05Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2647-1",
"initial_release_date": "2026-06-26T10:34:05Z",
"revision_history": [
{
"date": "2026-06-26T10:34:05Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-150600.13.18.1.aarch64",
"product": {
"name": "corepack22-22.23.0-150600.13.18.1.aarch64",
"product_id": "corepack22-22.23.0-150600.13.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-150600.13.18.1.aarch64",
"product": {
"name": "nodejs22-22.23.0-150600.13.18.1.aarch64",
"product_id": "nodejs22-22.23.0-150600.13.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"product": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"product_id": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-150600.13.18.1.aarch64",
"product": {
"name": "npm22-22.23.0-150600.13.18.1.aarch64",
"product_id": "npm22-22.23.0-150600.13.18.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-150600.13.18.1.i586",
"product": {
"name": "corepack22-22.23.0-150600.13.18.1.i586",
"product_id": "corepack22-22.23.0-150600.13.18.1.i586"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-150600.13.18.1.i586",
"product": {
"name": "nodejs22-22.23.0-150600.13.18.1.i586",
"product_id": "nodejs22-22.23.0-150600.13.18.1.i586"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-150600.13.18.1.i586",
"product": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.i586",
"product_id": "nodejs22-devel-22.23.0-150600.13.18.1.i586"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-150600.13.18.1.i586",
"product": {
"name": "npm22-22.23.0-150600.13.18.1.i586",
"product_id": "npm22-22.23.0-150600.13.18.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"product": {
"name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"product_id": "nodejs22-docs-22.23.0-150600.13.18.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-150600.13.18.1.ppc64le",
"product": {
"name": "corepack22-22.23.0-150600.13.18.1.ppc64le",
"product_id": "corepack22-22.23.0-150600.13.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
"product": {
"name": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
"product_id": "nodejs22-22.23.0-150600.13.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"product": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"product_id": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-150600.13.18.1.ppc64le",
"product": {
"name": "npm22-22.23.0-150600.13.18.1.ppc64le",
"product_id": "npm22-22.23.0-150600.13.18.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-150600.13.18.1.s390x",
"product": {
"name": "corepack22-22.23.0-150600.13.18.1.s390x",
"product_id": "corepack22-22.23.0-150600.13.18.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-150600.13.18.1.s390x",
"product": {
"name": "nodejs22-22.23.0-150600.13.18.1.s390x",
"product_id": "nodejs22-22.23.0-150600.13.18.1.s390x"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"product": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"product_id": "nodejs22-devel-22.23.0-150600.13.18.1.s390x"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-150600.13.18.1.s390x",
"product": {
"name": "npm22-22.23.0-150600.13.18.1.s390x",
"product_id": "npm22-22.23.0-150600.13.18.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack22-22.23.0-150600.13.18.1.x86_64",
"product": {
"name": "corepack22-22.23.0-150600.13.18.1.x86_64",
"product_id": "corepack22-22.23.0-150600.13.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-22.23.0-150600.13.18.1.x86_64",
"product": {
"name": "nodejs22-22.23.0-150600.13.18.1.x86_64",
"product_id": "nodejs22-22.23.0-150600.13.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"product": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"product_id": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64"
}
},
{
"category": "product_version",
"name": "npm22-22.23.0-150600.13.18.1.x86_64",
"product": {
"name": "npm22-22.23.0-150600.13.18.1.x86_64",
"product_id": "npm22-22.23.0-150600.13.18.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6",
"product_id": "SUSE Linux Enterprise Server 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch"
},
"product_reference": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch"
},
"product_reference": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "nodejs22-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch"
},
"product_reference": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
},
"product_reference": "npm22-22.23.0-150600.13.18.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-11525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11525"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nWhen undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently mapped to one of the three standard tokens. For example, SameSite=NoneOfYourBusiness is parsed as None (the most permissive setting), and SameSite=StrictLax is parsed as Lax (a downgrade from Strict).\n\nAffected applications are those that consume Set-Cookie headers from server responses (for example via undici\u0027s fetch or proxy code paths) and then forward or rely on the parsed sameSite attribute. A malicious or non-compliant server can coerce the consumer\u0027s view of a cookie\u0027s SameSite policy to a weaker value, silently degrading the SameSite enforcement the cookie is supposed to provide.\n\nThis was introduced in undici 5.15.0 when the cookies feature was added.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nAfter parsing a Set-Cookie header, validate that the resulting sameSite attribute is one of \u0027Strict\u0027, \u0027Lax\u0027, or \u0027None\u0027 (exact, case-insensitive) before forwarding or relying on it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11525",
"url": "https://www.suse.com/security/cve/CVE-2026-11525"
},
{
"category": "external",
"summary": "SUSE Bug 1268481 for CVE-2026-11525",
"url": "https://bugzilla.suse.com/1268481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "low"
}
],
"title": "CVE-2026-11525"
},
{
"cve": "CVE-2026-12151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12151"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nThe undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service.\n\nAffected applications are those using the undici WebSocket client (new WebSocket(...)) or the WebSocketStream API that can be induced to connect to an attacker-controlled or compromised WebSocket endpoint.\n\nAll releases starting at undici 6.17.0 are affected.\n\nPatches: Upgrade to undici \u003e= 6.26.0, \u003e= 7.28.0, or \u003e= 8.5.0. Workarounds:\nNo workaround is available. The fix must be applied through an upgrade.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12151",
"url": "https://www.suse.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "SUSE Bug 1268482 for CVE-2026-12151",
"url": "https://bugzilla.suse.com/1268482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-12151"
},
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
},
{
"cve": "CVE-2026-40170",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-40170"
}
],
"notes": [
{
"category": "general",
"text": "ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-40170",
"url": "https://www.suse.com/security/cve/CVE-2026-40170"
},
{
"category": "external",
"summary": "SUSE Bug 1262273 for CVE-2026-40170",
"url": "https://bugzilla.suse.com/1262273"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "important"
}
],
"title": "CVE-2026-40170"
},
{
"cve": "CVE-2026-42338",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42338"
}
],
"notes": [
{
"category": "general",
"text": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressError.parseMessage (emitted by the Address6 constructor for invalid input) can contain unescaped attacker-controlled content in one branch. An application that (1) passes untrusted input to Address6 and (2) renders the output of these methods, or the thrown error\u0027s parseMessage, as HTML (e.g. via innerHTML) is vulnerable to cross-site scripting. This vulnerability is fixed in 10.1.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42338",
"url": "https://www.suse.com/security/cve/CVE-2026-42338"
},
{
"category": "external",
"summary": "SUSE Bug 1268097 for CVE-2026-42338",
"url": "https://bugzilla.suse.com/1268097"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-42338"
},
{
"cve": "CVE-2026-48615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48615"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages.\r\n\r\nWhen proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48615",
"url": "https://www.suse.com/security/cve/CVE-2026-48615"
},
{
"category": "external",
"summary": "SUSE Bug 1268598 for CVE-2026-48615",
"url": "https://bugzilla.suse.com/1268598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "important"
}
],
"title": "CVE-2026-48615"
},
{
"cve": "CVE-2026-48617",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48617"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48617",
"url": "https://www.suse.com/security/cve/CVE-2026-48617"
},
{
"category": "external",
"summary": "SUSE Bug 1268554 for CVE-2026-48617",
"url": "https://bugzilla.suse.com/1268554"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.9,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-48617"
},
{
"cve": "CVE-2026-48618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48618"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat.\r\n\r\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48618",
"url": "https://www.suse.com/security/cve/CVE-2026-48618"
},
{
"category": "external",
"summary": "SUSE Bug 1268593 for CVE-2026-48618",
"url": "https://bugzilla.suse.com/1268593"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "important"
}
],
"title": "CVE-2026-48618"
},
{
"cve": "CVE-2026-48619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48619"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48619",
"url": "https://www.suse.com/security/cve/CVE-2026-48619"
},
{
"category": "external",
"summary": "SUSE Bug 1268618 for CVE-2026-48619",
"url": "https://bugzilla.suse.com/1268618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-48619"
},
{
"cve": "CVE-2026-48928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48928"
}
],
"notes": [
{
"category": "general",
"text": "A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48928",
"url": "https://www.suse.com/security/cve/CVE-2026-48928"
},
{
"category": "external",
"summary": "SUSE Bug 1268605 for CVE-2026-48928",
"url": "https://bugzilla.suse.com/1268605"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-48928"
},
{
"cve": "CVE-2026-48930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48930"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48930",
"url": "https://www.suse.com/security/cve/CVE-2026-48930"
},
{
"category": "external",
"summary": "SUSE Bug 1268606 for CVE-2026-48930",
"url": "https://bugzilla.suse.com/1268606"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-48930"
},
{
"cve": "CVE-2026-48931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48931"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48931",
"url": "https://www.suse.com/security/cve/CVE-2026-48931"
},
{
"category": "external",
"summary": "SUSE Bug 1268611 for CVE-2026-48931",
"url": "https://bugzilla.suse.com/1268611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "low"
}
],
"title": "CVE-2026-48931"
},
{
"cve": "CVE-2026-48933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48933"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48933",
"url": "https://www.suse.com/security/cve/CVE-2026-48933"
},
{
"category": "external",
"summary": "SUSE Bug 1268592 for CVE-2026-48933",
"url": "https://bugzilla.suse.com/1268592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "important"
}
],
"title": "CVE-2026-48933"
},
{
"cve": "CVE-2026-48934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48934"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48934",
"url": "https://www.suse.com/security/cve/CVE-2026-48934"
},
{
"category": "external",
"summary": "SUSE Bug 1268608 for CVE-2026-48934",
"url": "https://bugzilla.suse.com/1268608"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-48934"
},
{
"cve": "CVE-2026-48935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48935"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. `--allow-fs-read`.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48935",
"url": "https://www.suse.com/security/cve/CVE-2026-48935"
},
{
"category": "external",
"summary": "SUSE Bug 1268609 for CVE-2026-48935",
"url": "https://bugzilla.suse.com/1268609"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-48935"
},
{
"cve": "CVE-2026-48937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48937"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This vulnerability affects two supported release lines: **Node.js 22** and **Node.js 24**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48937",
"url": "https://www.suse.com/security/cve/CVE-2026-48937"
},
{
"category": "external",
"summary": "SUSE Bug 1268555 for CVE-2026-48937",
"url": "https://bugzilla.suse.com/1268555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-48937"
},
{
"cve": "CVE-2026-6733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6733"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nUndici\u0027s HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response onto an idle socket after a request completes. When the client dispatches the next request on that socket, it associates the injected response with the new request, causing responses to be delivered to the wrong requests.\n\nThis requires an attacker-controlled or compromised upstream HTTP/1.1 server and keep-alive connection reuse.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nDisable keep-alive connection reuse by setting keepAliveTimeout: 0 on the Client or Pool.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6733",
"url": "https://www.suse.com/security/cve/CVE-2026-6733"
},
{
"category": "external",
"summary": "SUSE Bug 1268479 for CVE-2026-6733",
"url": "https://bugzilla.suse.com/1268479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "low"
}
],
"title": "CVE-2026-6733"
},
{
"cve": "CVE-2026-9496",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9496"
}
],
"notes": [
{
"category": "general",
"text": "Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function\u0027s regex replacement and string-manipulation logic, causing excessive CPU consumption and potentially stalling or crashing the process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9496",
"url": "https://www.suse.com/security/cve/CVE-2026-9496"
},
{
"category": "external",
"summary": "SUSE Bug 1266318 for CVE-2026-9496",
"url": "https://bugzilla.suse.com/1266318"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-9496"
},
{
"cve": "CVE-2026-9679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9679"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nundici\u0027s cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 5.4 does not specify any decoding and browsers do not decode either.\n\nApplications that parse a Set-Cookie header and then forward the parsed value into a response header (proxies, middleware, SSR frameworks) become vulnerable to HTTP response header injection: an attacker-controlled upstream can inject arbitrary Set-Cookie, Location, or Cache-Control headers into the application\u0027s downstream response, enabling session fixation, open redirect, or cache poisoning.\n\nAffected applications are those that use undici\u0027s cookie parsing (parseSetCookie, parseCookie, getSetCookies) and forward the parsed cookie value into a response header.\n\nThis was introduced in undici 7.0.0 via PR #3789.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nIf upgrade is not immediately possible, do not forward values returned by parseSetCookie/parseCookie/getSetCookies directly into response headers; sanitize the value first to strip or reject CR, LF, NUL, ;, and = bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9679",
"url": "https://www.suse.com/security/cve/CVE-2026-9679"
},
{
"category": "external",
"summary": "SUSE Bug 1268477 for CVE-2026-9679",
"url": "https://bugzilla.suse.com/1268477"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
"SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-26T10:34:05Z",
"details": "moderate"
}
],
"title": "CVE-2026-9679"
}
]
}
ubuntu-cve-2026-27135
Vulnerability from osv_ubuntu
Published
2026-03-18 18:16
Modified
2026-06-30 16:19
Summary
Details
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API nghttp2_session_terminate_session or nghttp2_session_terminate_session2 is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.
Severity
7.5 (High)
7.5 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libnghttp2-14",
"binary_version": "1.7.1-1ubuntu0.1~esm3"
},
{
"binary_name": "nghttp2",
"binary_version": "1.7.1-1ubuntu0.1~esm3"
},
{
"binary_name": "nghttp2-client",
"binary_version": "1.7.1-1ubuntu0.1~esm3"
},
{
"binary_name": "nghttp2-proxy",
"binary_version": "1.7.1-1ubuntu0.1~esm3"
},
{
"binary_name": "nghttp2-server",
"binary_version": "1.7.1-1ubuntu0.1~esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "nghttp2",
"purl": "pkg:deb/ubuntu/nghttp2@1.7.1-1ubuntu0.1~esm3?arch=source\u0026distro=esm-apps/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.1-1ubuntu0.1~esm3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.6.7-1",
"1.3.4-2",
"1.4.0-1",
"1.4.0-2",
"1.5.0-2",
"1.6.0-1",
"1.7.0-1",
"1.7.1-1",
"1.7.1-1ubuntu0.1~esm1",
"1.7.1-1ubuntu0.1~esm2"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libnghttp2-14",
"binary_version": "1.30.0-1ubuntu1+esm3"
},
{
"binary_name": "nghttp2",
"binary_version": "1.30.0-1ubuntu1+esm3"
},
{
"binary_name": "nghttp2-client",
"binary_version": "1.30.0-1ubuntu1+esm3"
},
{
"binary_name": "nghttp2-proxy",
"binary_version": "1.30.0-1ubuntu1+esm3"
},
{
"binary_name": "nghttp2-server",
"binary_version": "1.30.0-1ubuntu1+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "nghttp2",
"purl": "pkg:deb/ubuntu/nghttp2@1.30.0-1ubuntu1+esm3?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.30.0-1ubuntu1+esm3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.25.0-1",
"1.27.0-1",
"1.28.0-1",
"1.29.0-1",
"1.29.0-1build1",
"1.30.0-1",
"1.30.0-1ubuntu1",
"1.30.0-1ubuntu1+esm1",
"1.30.0-1ubuntu1+esm2"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "libnghttp2-14",
"binary_version": "1.40.0-1ubuntu0.3+esm1"
},
{
"binary_name": "nghttp2",
"binary_version": "1.40.0-1ubuntu0.3+esm1"
},
{
"binary_name": "nghttp2-client",
"binary_version": "1.40.0-1ubuntu0.3+esm1"
},
{
"binary_name": "nghttp2-proxy",
"binary_version": "1.40.0-1ubuntu0.3+esm1"
},
{
"binary_name": "nghttp2-server",
"binary_version": "1.40.0-1ubuntu0.3+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "nghttp2",
"purl": "pkg:deb/ubuntu/nghttp2@1.40.0-1ubuntu0.3+esm1?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.40.0-1ubuntu0.3+esm1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.39.2-1",
"1.40.0-1",
"1.40.0-1build1",
"1.40.0-1ubuntu0.1",
"1.40.0-1ubuntu0.2",
"1.40.0-1ubuntu0.3"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnghttp2-14",
"binary_version": "1.43.0-1ubuntu0.3"
},
{
"binary_name": "nghttp2",
"binary_version": "1.43.0-1ubuntu0.3"
},
{
"binary_name": "nghttp2-client",
"binary_version": "1.43.0-1ubuntu0.3"
},
{
"binary_name": "nghttp2-proxy",
"binary_version": "1.43.0-1ubuntu0.3"
},
{
"binary_name": "nghttp2-server",
"binary_version": "1.43.0-1ubuntu0.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "nghttp2",
"purl": "pkg:deb/ubuntu/nghttp2@1.43.0-1ubuntu0.3?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.43.0-1ubuntu0.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.43.0-1",
"1.43.0-1build1",
"1.43.0-1build2",
"1.43.0-1build3",
"1.43.0-1ubuntu0.1",
"1.43.0-1ubuntu0.2"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnghttp2-14",
"binary_version": "1.59.0-1ubuntu0.3"
},
{
"binary_name": "nghttp2",
"binary_version": "1.59.0-1ubuntu0.3"
},
{
"binary_name": "nghttp2-client",
"binary_version": "1.59.0-1ubuntu0.3"
},
{
"binary_name": "nghttp2-proxy",
"binary_version": "1.59.0-1ubuntu0.3"
},
{
"binary_name": "nghttp2-server",
"binary_version": "1.59.0-1ubuntu0.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "nghttp2",
"purl": "pkg:deb/ubuntu/nghttp2@1.59.0-1ubuntu0.3?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.59.0-1ubuntu0.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.55.1-1",
"1.57.0-1",
"1.58.0-1",
"1.59.0-1",
"1.59.0-1build1",
"1.59.0-1build2",
"1.59.0-1build4",
"1.59.0-1ubuntu0.1",
"1.59.0-1ubuntu0.2"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnghttp2-14",
"binary_version": "1.64.0-1.1ubuntu1.1"
},
{
"binary_name": "nghttp2",
"binary_version": "1.64.0-1.1ubuntu1.1"
},
{
"binary_name": "nghttp2-client",
"binary_version": "1.64.0-1.1ubuntu1.1"
},
{
"binary_name": "nghttp2-proxy",
"binary_version": "1.64.0-1.1ubuntu1.1"
},
{
"binary_name": "nghttp2-server",
"binary_version": "1.64.0-1.1ubuntu1.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "nghttp2",
"purl": "pkg:deb/ubuntu/nghttp2@1.64.0-1.1ubuntu1.1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.64.0-1.1ubuntu1.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.64.0-1ubuntu1",
"1.64.0-1.1",
"1.64.0-1.1build1",
"1.64.0-1.1ubuntu1"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "libnghttp2-14",
"binary_version": "1.68.0-2ubuntu0.1"
},
{
"binary_name": "nghttp2",
"binary_version": "1.68.0-2ubuntu0.1"
},
{
"binary_name": "nghttp2-client",
"binary_version": "1.68.0-2ubuntu0.1"
},
{
"binary_name": "nghttp2-proxy",
"binary_version": "1.68.0-2ubuntu0.1"
},
{
"binary_name": "nghttp2-server",
"binary_version": "1.68.0-2ubuntu0.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "nghttp2",
"purl": "pkg:deb/ubuntu/nghttp2@1.68.0-2ubuntu0.1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.68.0-2ubuntu0.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.64.0-1.1ubuntu1",
"1.64.0-1.1ubuntu2",
"1.68.0-1",
"1.68.0-2"
]
}
],
"aliases": [],
"details": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"id": "UBUNTU-CVE-2026-27135",
"modified": "2026-06-30T16:19:40Z",
"published": "2026-03-18T18:16:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-27135"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
},
{
"type": "REPORT",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8233-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8233-2"
}
],
"related": [
"USN-8233-1",
"USN-8233-2"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-27135"
]
}
WID-SEC-W-2026-0775
Vulnerability from csaf_certbund - Published: 2026-03-17 23:00 - Updated: 2026-06-10 22:00Summary
nghttp2: Schwachstelle ermöglicht Denial of Service
Severity
Mittel
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: nghttp2 ist eine Implementierung von HTTP/2 und dessen Header-Kompressionsalgorithmus HPACK in C.
Angriff: Ein entfernter, anonymer Angreifer kann eine Schwachstelle in nghttp2 ausnutzen, um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme: - Linux
- Sonstiges
- UNIX
- Windows
Affected products
Known affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Red Hat OpenShift Container Platform <4.12.91
Red Hat / OpenShift
|
Container Platform <4.12.91 | ||
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
Red Hat OpenShift Container Platform <4.13.67
Red Hat / OpenShift
|
Container Platform <4.13.67 | ||
|
Red Hat OpenShift Container Platform <4.18.43
Red Hat / OpenShift
|
Container Platform <4.18.43 | ||
|
Red Hat OpenShift Container Platform <4.17.54
Red Hat / OpenShift
|
Container Platform <4.17.54 | ||
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
Red Hat OpenShift Container Platform <4.15.64
Red Hat / OpenShift
|
Container Platform <4.15.64 | ||
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
IBM App Connect Enterprise
IBM
|
cpe:/a:ibm:app_connect_enterprise:-
|
— | |
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Open Source nghttp2 <1.68.1
Open Source / nghttp2
|
<1.68.1 | ||
|
Red Hat OpenShift Container Platform <4.19.32
Red Hat / OpenShift
|
Container Platform <4.19.32 | ||
|
IBM MQ Agent
IBM / MQ
|
cpe:/a:ibm:mq:agent
|
Agent | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
IBM MQ
IBM / MQ
|
cpe:/a:ibm:mq:-
|
— | |
|
Google Container-Optimized OS
Google
|
cpe:/o:google:container-optimized_os:-
|
— |
References
60 references
{
"document": {
"aggregate_severity": {
"text": "mittel"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "nghttp2 ist eine Implementierung von HTTP/2 und dessen Header-Kompressionsalgorithmus HPACK in C.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in nghttp2 ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-0775 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0775.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-0775 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0775"
},
{
"category": "external",
"summary": "nghttp2 GitHub Security Advisory GHSA-6933-cjhr-5qg6 vom 2026-03-17",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1074-1 vom 2026-03-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024959.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1056-1 vom 2026-03-26",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024951.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:20870-1 vom 2026-03-27",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024971.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:20833-1 vom 2026-03-28",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/025004.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:20925-1 vom 2026-04-01",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025092.html"
},
{
"category": "external",
"summary": "Google Container-Optimized OS release notes vom 2026-04-04",
"url": "https://docs.cloud.google.com/container-optimized-os/docs/release-notes#March_30_2026"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:7670 vom 2026-04-13",
"url": "https://errata.build.resf.org/RLSA-2026:7670"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1247-1 vom 2026-04-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025204.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:7670 vom 2026-04-13",
"url": "https://access.redhat.com/errata/RHSA-2026:7670"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:7666 vom 2026-04-13",
"url": "https://access.redhat.com/errata/RHSA-2026:7666"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:7667 vom 2026-04-13",
"url": "https://access.redhat.com/errata/RHSA-2026:7667"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:7668 vom 2026-04-13",
"url": "https://access.redhat.com/errata/RHSA-2026:7668"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-7666 vom 2026-04-13",
"url": "https://linux.oracle.com/errata/ELSA-2026-7666.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:7983 vom 2026-04-14",
"url": "https://access.redhat.com/errata/RHSA-2026:7983"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-7668 vom 2026-04-13",
"url": "https://linux.oracle.com/errata/ELSA-2026-7668.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2026-3232 vom 2026-04-14",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3232.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:7896 vom 2026-04-14",
"url": "https://errata.build.resf.org/RLSA-2026:7896"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-7667 vom 2026-04-13",
"url": "https://linux.oracle.com/errata/ELSA-2026-7667.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:1350-1 vom 2026-04-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025367.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:7668 vom 2026-04-15",
"url": "https://errata.build.resf.org/RLSA-2026:7668"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:8339 vom 2026-04-16",
"url": "https://errata.build.resf.org/RLSA-2026:8339"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:7666 vom 2026-04-15",
"url": "https://errata.build.resf.org/RLSA-2026:7666"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8339 vom 2026-04-15",
"url": "https://access.redhat.com/errata/RHSA-2026:8339"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:7667 vom 2026-04-16",
"url": "https://errata.build.resf.org/RLSA-2026:7667"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8546 vom 2026-04-16",
"url": "https://access.redhat.com/errata/RHSA-2026:8546"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8545 vom 2026-04-16",
"url": "https://access.redhat.com/errata/RHSA-2026:8545"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8541 vom 2026-04-16",
"url": "https://access.redhat.com/errata/RHSA-2026:8541"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8540 vom 2026-04-16",
"url": "https://access.redhat.com/errata/RHSA-2026:8540"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8539 vom 2026-04-16",
"url": "https://access.redhat.com/errata/RHSA-2026:8539"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8538 vom 2026-04-16",
"url": "https://access.redhat.com/errata/RHSA-2026:8538"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8548 vom 2026-04-16",
"url": "https://access.redhat.com/errata/RHSA-2026:8548"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8547 vom 2026-04-16",
"url": "https://access.redhat.com/errata/RHSA-2026:8547"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:8868 vom 2026-04-20",
"url": "https://access.redhat.com/errata/RHSA-2026:8868"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:10065 vom 2026-04-23",
"url": "https://access.redhat.com/errata/RHSA-2026:10065"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:9711 vom 2026-04-22",
"url": "https://access.redhat.com/errata/RHSA-2026:9711"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:9832 vom 2026-04-22",
"url": "https://access.redhat.com/errata/RHSA-2026:9832"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:9874 vom 2026-04-22",
"url": "https://access.redhat.com/errata/RHSA-2026:9874"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:11768 vom 2026-04-29",
"url": "https://access.redhat.com/errata/RHSA-2026:11768"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:13812 vom 2026-05-05",
"url": "https://access.redhat.com/errata/RHSA-2026:13812"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8233-1 vom 2026-05-05",
"url": "https://ubuntu.com/security/notices/USN-8233-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-8233-2 vom 2026-05-06",
"url": "https://ubuntu.com/security/notices/USN-8233-2"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:14391 vom 2026-05-07",
"url": "https://access.redhat.com/errata/RHSA-2026:14391"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:14937 vom 2026-05-08",
"url": "https://access.redhat.com/errata/RHSA-2026:14937"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7272299 vom 2026-05-07",
"url": "https://www.ibm.com/support/pages/node/7272299"
},
{
"category": "external",
"summary": "Red Hat Security Advisory vom 2026-05-13",
"url": "https://access.redhat.com/errata/RHSA-2026:14773"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:15087 vom 2026-05-13",
"url": "https://access.redhat.com/errata/RHSA-2026:15087"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-6266 vom 2026-05-14",
"url": "https://lists.debian.org/debian-security-announce/2026/msg00177.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7273145 vom 2026-05-15",
"url": "https://www.ibm.com/support/pages/node/7273145"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7273338 vom 2026-05-18",
"url": "https://www.ibm.com/support/pages/node/7273338"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:19724 vom 2026-05-21",
"url": "https://access.redhat.com/errata/RHSA-2026:19724"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:17596 vom 2026-05-20",
"url": "https://access.redhat.com/errata/RHSA-2026:17596"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20040 vom 2026-05-27",
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:20087 vom 2026-05-29",
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21656 vom 2026-06-03",
"url": "https://access.redhat.com/errata/RHSA-2026:21656"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21695 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:21695"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:21690 vom 2026-06-04",
"url": "https://access.redhat.com/errata/RHSA-2026:21690"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:25096 vom 2026-06-10",
"url": "https://access.redhat.com/errata/RHSA-2026:25096"
}
],
"source_lang": "en-US",
"title": "nghttp2: Schwachstelle erm\u00f6glicht Denial of Service",
"tracking": {
"current_release_date": "2026-06-10T22:00:00.000+00:00",
"generator": {
"date": "2026-06-11T10:51:59.572+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-0775",
"initial_release_date": "2026-03-17T23:00:00.000+00:00",
"revision_history": [
{
"date": "2026-03-17T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-03-18T23:00:00.000+00:00",
"number": "2",
"summary": "Referenz(en) aufgenommen: EUVD-2026-12919"
},
{
"date": "2026-03-26T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-03-29T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-04-01T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-04-06T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2026-04-12T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Rocky Enterprise Software Foundation, SUSE und Red Hat aufgenommen"
},
{
"date": "2026-04-13T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Red Hat, Oracle Linux, Amazon und Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2026-04-15T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von SUSE, Rocky Enterprise Software Foundation und Red Hat aufgenommen"
},
{
"date": "2026-04-16T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen"
},
{
"date": "2026-04-19T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-04-22T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-04-29T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-05-05T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Red Hat und Ubuntu aufgenommen"
},
{
"date": "2026-05-06T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Ubuntu und Red Hat aufgenommen"
},
{
"date": "2026-05-07T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Red Hat und IBM aufgenommen"
},
{
"date": "2026-05-14T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Red Hat und Debian aufgenommen"
},
{
"date": "2026-05-17T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-05-18T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-05-20T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-05-27T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-05-31T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-04T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-10T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "24"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Google Container-Optimized OS",
"product": {
"name": "Google Container-Optimized OS",
"product_id": "1607324",
"product_identification_helper": {
"cpe": "cpe:/o:google:container-optimized_os:-"
}
}
}
],
"category": "vendor",
"name": "Google"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM App Connect Enterprise",
"product": {
"name": "IBM App Connect Enterprise",
"product_id": "T051349",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:app_connect_enterprise:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "IBM MQ",
"product": {
"name": "IBM MQ",
"product_id": "T021398",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:mq:-"
}
}
},
{
"category": "product_version",
"name": "Agent",
"product": {
"name": "IBM MQ Agent",
"product_id": "T054280",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:mq:agent"
}
}
}
],
"category": "product_name",
"name": "MQ"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c1.68.1",
"product": {
"name": "Open Source nghttp2 \u003c1.68.1",
"product_id": "T051878"
}
},
{
"category": "product_version",
"name": "1.68.1",
"product": {
"name": "Open Source nghttp2 1.68.1",
"product_id": "T051878-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:nghttp2:nghttp2:1.68.1"
}
}
}
],
"category": "product_name",
"name": "nghttp2"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T032255",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "Container Platform \u003c4.15.64",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.15.64",
"product_id": "T054017"
}
},
{
"category": "product_version",
"name": "Container Platform 4.15.64",
"product": {
"name": "Red Hat OpenShift Container Platform 4.15.64",
"product_id": "T054017-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.15.64"
}
}
},
{
"category": "product_version_range",
"name": "Container Platform \u003c4.17.54",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.17.54",
"product_id": "T054403"
}
},
{
"category": "product_version",
"name": "Container Platform 4.17.54",
"product": {
"name": "Red Hat OpenShift Container Platform 4.17.54",
"product_id": "T054403-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.17.54"
}
}
},
{
"category": "product_version_range",
"name": "Container Platform \u003c4.19.32",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.19.32",
"product_id": "T054748"
}
},
{
"category": "product_version",
"name": "Container Platform 4.19.32",
"product": {
"name": "Red Hat OpenShift Container Platform 4.19.32",
"product_id": "T054748-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.19.32"
}
}
},
{
"category": "product_version_range",
"name": "Container Platform \u003c4.18.43",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.18.43",
"product_id": "T054988"
}
},
{
"category": "product_version",
"name": "Container Platform 4.18.43",
"product": {
"name": "Red Hat OpenShift Container Platform 4.18.43",
"product_id": "T054988-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.18.43"
}
}
},
{
"category": "product_version_range",
"name": "Container Platform \u003c4.13.67",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.13.67",
"product_id": "T054989"
}
},
{
"category": "product_version",
"name": "Container Platform 4.13.67",
"product": {
"name": "Red Hat OpenShift Container Platform 4.13.67",
"product_id": "T054989-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.13.67"
}
}
},
{
"category": "product_version_range",
"name": "Container Platform \u003c4.12.91",
"product": {
"name": "Red Hat OpenShift Container Platform \u003c4.12.91",
"product_id": "T054990"
}
},
{
"category": "product_version",
"name": "Container Platform 4.12.91",
"product": {
"name": "Red Hat OpenShift Container Platform 4.12.91",
"product_id": "T054990-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:container_platform__4.12.91"
}
}
}
],
"category": "product_name",
"name": "OpenShift"
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27135",
"product_status": {
"known_affected": [
"T054990",
"67646",
"T054989",
"T054988",
"T054403",
"T004914",
"T054017",
"T032255",
"2951",
"T002207",
"T051349",
"T000126",
"T051878",
"T054748",
"T054280",
"398363",
"T021398",
"1607324"
]
},
"release_date": "2026-03-17T23:00:00.000+00:00",
"title": "CVE-2026-27135"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…