RHSA-2026:7080

security update for nodejs22

Advisory ansehen veröffentlicht 2026-04-08

security update for nodejs22

beschreibt (9)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-21710US	—	25.0% (98th)	Exploit	2026-03-30
A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`…
CVE-2026-27135US	—	0.80% (56th)	—	2026-03-18
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public…
CVE-2026-2229US	—	0.89% (59th)	—	2026-03-12
ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of the server_max_window_bits parameter in the permessage-deflate extension…
CVE-2026-1528US	—	0.50% (42nd)	—	2026-03-12
ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state…
CVE-2026-1526US	—	1.17% (67th)	—	2026-03-12
The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression. When a WebSocket connection negoti…
CVE-2026-1525US	critical9.8	0.51% (43rd)	—	2026-03-12
Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length). This produces malformed HT…
CVE-2026-27904US	—	0.53% (44th)	—	2026-02-26
minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4…
CVE-2026-26996US	high7.5	0.58% (47th)	—	2026-02-20
minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Ser…
CVE-2026-25547US	—	0.55% (46th)	—	2026-02-04
@isaacs/brace-expansion is a hybrid CJS/ESM TypeScript fork of brace-expansion. Prior to version 5.0.1, @isaacs/brace-expansion is vulnerable to a denial of service (DoS) issue cau…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Behebungen (54)

Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-devel-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-docs-1:22.22.2-1.el10_1.noarch as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-full-i18n-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-libs-1:22.22.2-1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Behobennodejs-npm-1:10.9.7-1.22.22.2.1.el10_1.x86_64 as component of SUSE Liberty Linux 10
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan