RHSA-2026:74085
Vulnerability from csaf_redhat - Published: 2026-09-30 21:17 - Updated: 2026-10-01 03:31Summary
Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update
Severity
Important
Notes
Topic: An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
* undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation (CVE-2026-85152)
* undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options (CVE-2026-84961)
* undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534)
Bug Fix(es) and Enhancement(s):
* nodejs:24/nodejs: Rebase to the latest Node.js 24 release [rhel-8.10.z] (JIRA:RHEL-249188)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service (DoS).
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security (TLS) certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently, a peer with an otherwise untrusted certificate may be accepted, potentially compromising the integrity of secure communication.
7.4 (High)
Affected products
Fixed
40 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure and potentially a full authentication bypass. An attacker could exploit this by having a trusted origin accept a malicious token, without contacting the legitimate trusted origin.
7.4 (High)
Affected products
Fixed
40 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
References
23 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. \n\nSecurity Fix(es):\n\n* undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation (CVE-2026-85152)\n\n* undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options (CVE-2026-84961)\n\n* undici: undici: Denial of Service via unrequested WebSocket subprotocol (CVE-2026-19534)\n\nBug Fix(es) and Enhancement(s):\n\n* nodejs:24/nodejs: Rebase to the latest Node.js 24 release [rhel-8.10.z] (JIRA:RHEL-249188)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:74085",
"url": "https://access.redhat.com/errata/RHSA-2026:74085"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2528717",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528717"
},
{
"category": "external",
"summary": "2528735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528735"
},
{
"category": "external",
"summary": "2528759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528759"
},
{
"category": "external",
"summary": "RHEL-249188",
"url": "https://issues.redhat.com/browse/RHEL-249188"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74085.json"
}
],
"title": "Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2026-10-01T03:31:33+00:00",
"generator": {
"date": "2026-10-01T03:31:33+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:74085",
"initial_release_date": "2026-09-30T21:17:12+00:00",
"revision_history": [
{
"date": "2026-09-30T21:17:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-30T21:17:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-01T03:31:33+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"product": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src (nodejs:24)",
"product_id": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=src\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"product": {
"name": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src (nodejs:24)",
"product_id": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.1.14-2.module%2Bel8.10.0%2B24711%2Bb610b202?arch=src\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"product": {
"name": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src (nodejs:24)",
"product_id": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-6.module%2Bel8.10.0%2B24711%2Bb610b202?arch=src\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"product": {
"name": "nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch (nodejs:24)",
"product_id": "nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-docs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"product": {
"name": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch (nodejs:24)",
"product_id": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-nodemon@3.1.14-2.module%2Bel8.10.0%2B24711%2Bb610b202?arch=noarch\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"product": {
"name": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch (nodejs:24)",
"product_id": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging@2021.06-6.module%2Bel8.10.0%2B24711%2Bb610b202?arch=noarch\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"product": {
"name": "nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch (nodejs:24)",
"product_id": "nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-packaging-bundler@2021.06-6.module%2Bel8.10.0%2B24711%2Bb610b202?arch=noarch\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"product": {
"name": "npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch (nodejs:24)",
"product_id": "npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/npm@11.19.0-1.24.21.0.1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=noarch\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24)",
"product_id": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product": {
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24)",
"product_id": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product": {
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24)",
"product_id": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product": {
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24)",
"product_id": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product": {
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24)",
"product_id": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product": {
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24)",
"product_id": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product": {
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24)",
"product_id": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=aarch64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product": {
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24)",
"product_id": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-13.6-devel@13.6.233.17-1.24.21.0.1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=aarch64\u0026epoch=3\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24)",
"product_id": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product": {
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24)",
"product_id": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product": {
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24)",
"product_id": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product": {
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24)",
"product_id": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product": {
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24)",
"product_id": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product": {
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24)",
"product_id": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product": {
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24)",
"product_id": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=ppc64le\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product": {
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24)",
"product_id": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-13.6-devel@13.6.233.17-1.24.21.0.1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=ppc64le\u0026epoch=3\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24)",
"product_id": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product": {
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24)",
"product_id": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product": {
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24)",
"product_id": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product": {
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24)",
"product_id": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product": {
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24)",
"product_id": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product": {
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24)",
"product_id": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product": {
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24)",
"product_id": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=s390x\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product": {
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24)",
"product_id": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-13.6-devel@13.6.233.17-1.24.21.0.1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=s390x\u0026epoch=3\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24)",
"product_id": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product": {
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24)",
"product_id": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debuginfo@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product": {
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24)",
"product_id": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-debugsource@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product": {
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24)",
"product_id": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-devel@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product": {
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24)",
"product_id": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-full-i18n@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product": {
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24)",
"product_id": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product": {
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24)",
"product_id": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs-libs-debuginfo@24.21.0-1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=x86_64\u0026epoch=1\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
},
{
"category": "product_version",
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product": {
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24)",
"product_id": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-13.6-devel@13.6.233.17-1.24.21.0.1.module%2Bel8.10.0%2B24927%2Bed3d907a?arch=x86_64\u0026epoch=3\u0026rpmmod=nodejs:24:8100020260921144227:6d880403"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24"
},
"product_reference": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24"
},
"product_reference": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24"
},
"product_reference": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24"
},
"product_reference": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
},
"product_reference": "nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24"
},
"product_reference": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24"
},
"product_reference": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24"
},
"product_reference": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
},
"product_reference": "nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24"
},
"product_reference": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24"
},
"product_reference": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24"
},
"product_reference": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
},
"product_reference": "nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24"
},
"product_reference": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24"
},
"product_reference": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24"
},
"product_reference": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
},
"product_reference": "nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24"
},
"product_reference": "nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24"
},
"product_reference": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24"
},
"product_reference": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24"
},
"product_reference": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
},
"product_reference": "nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24"
},
"product_reference": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24"
},
"product_reference": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24"
},
"product_reference": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
},
"product_reference": "nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24"
},
"product_reference": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24"
},
"product_reference": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24"
},
"product_reference": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
},
"product_reference": "nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24"
},
"product_reference": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24"
},
"product_reference": "nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24"
},
"product_reference": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24"
},
"product_reference": "nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24"
},
"product_reference": "nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24"
},
"product_reference": "npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24"
},
"product_reference": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24"
},
"product_reference": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24"
},
"product_reference": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64 (nodejs:24) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
"product_id": "AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
},
"product_reference": "v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-19534",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-09-04T17:21:01.599799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via unrequested WebSocket subprotocol",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in undici\u0027s WebSocket client, which can lead to a Node.js process crash. The vulnerability is triggered when an application connects to a malicious or compromised server that responds with an unrequested WebSocket subprotocol, allowing a remote, unauthenticated attacker to cause a denial of service in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19534"
},
{
"category": "external",
"summary": "RHBZ#2528759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19534"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19534",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19534"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5"
}
],
"release_date": "2026-09-04T17:10:05.081000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-30T21:17:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:74085"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via unrequested WebSocket subprotocol"
},
{
"cve": "CVE-2026-84961",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-04T16:52:40.440125+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528735"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici\u0027s BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security (TLS) certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently, a peer with an otherwise untrusted certificate may be accepted, potentially compromising the integrity of secure communication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw only affects applications that construct an undici BalancedPool with a function-valued connect or tls option \u2014 for example, a custom checkServerIdentity callback or connector used for certificate pinning across multiple upstreams. Client, Pool, Agent, and RoundRobinPool destructure these options before the internal JSON-based clone and are not affected. An attacker able to present, on the network path, a TLS endpoint whose certificate the application\u0027s custom validator was written to reject \u2014 but which still satisfies Node.js\u0027s default hostname and chain checks \u2014 can have that certificate silently accepted when the connection goes through BalancedPool, enabling a man-in-the-middle attack against affected connections.\nThis affects undici versions from 7.24.1 up to 7.29.1 and from 8.0.0 up to 8.10.2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84961"
},
{
"category": "external",
"summary": "RHBZ#2528735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84961"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84961",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84961"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3"
}
],
"release_date": "2026-09-04T16:47:55.724000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-30T21:17:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:74085"
},
{
"category": "workaround",
"details": "Applications that do not use BalancedPool, or that use it without a custom function-valued connect/tls option, are not affected and require no action. As a workaround until packages are updated, avoid using BalancedPool for any connection that relies on custom TLS certificate validation (e.g. certificate pinning); use Client, Pool, or Agent instead, which are unaffected. The permanent fix is upgrading undici to 7.29.1 or later (7.x line) or 8.10.2 or later (8.x line).",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options"
},
{
"cve": "CVE-2026-85152",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-09-04T16:41:35.623977+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528717"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure and potentially a full authentication bypass. An attacker could exploit this by having a trusted origin accept a malicious token, without contacting the legitimate trusted origin.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is present in the undici HTTP client library used by Node.js. When an application composes undici\u0027s Cache or Deduplicate interceptor directly onto a Client or Pool object (rather than onto an Agent), the library\u0027s internal cache and in-flight-request deduplication keys omit the destination origin. As a result, a cached or in-flight response captured for one upstream origin can be returned for a request intended for a different, trusted origin whenever the method, path, and relevant headers match. In the most severe demonstrated scenario, this allowed an attacker-controlled JWT to be accepted by the application as though it had been validated against a legitimate, trusted issuer, without that issuer ever being contacted \u2014 resulting in a full authentication bypass.\nExploitation requires that the affected application attach the Cache or Deduplicate interceptor directly to a Client/Pool \u2014 the default Agent-based dispatch path is not affected, since Agent already carries the origin in its dispatch options \u2014 and that an attacker can influence or collide with the cache/deduplication key for at least one origin the application communicates with.).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-85152"
},
{
"category": "external",
"summary": "RHBZ#2528717",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528717"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-85152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85152"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85152",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85152"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vp8m-p9jh-q5pm",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vp8m-p9jh-q5pm"
}
],
"release_date": "2026-09-04T16:36:28.085000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-30T21:17:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:74085"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible to undici 8.10.2 or later.",
"product_ids": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-debugsource-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-devel-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-docs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-full-i18n-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-libs-debuginfo-1:24.21.0-1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:npm-1:11.19.0-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.noarch::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.aarch64::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.ppc64le::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.s390x::nodejs:24",
"AppStream-8.10.0.Z.MAIN.EUS:v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.module+el8.10.0+24927+ed3d907a.x86_64::nodejs:24"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…