ALSA-2026:48033 Important: nodejs22 security update

🗓️ 29 Jul 2026 00:00:00Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Node.js twenty two security update fixes brace expansion denial, tar header denial, and gzip bomb issues.

Reporter	Title	Published	Views	Family All 253
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie	24 Jul 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-13149)	27 Jul 202610:14	–	ibm
ATTACKERKB	CVE-2026-59874	8 Jul 202615:23	–	attackerkb
ATTACKERKB	CVE-2026-13149	30 Jun 202608:30	–	attackerkb
ATTACKERKB	CVE-2026-59873	8 Jul 202615:22	–	attackerkb
AlmaLinux	Important: nodejs:22 security update	28 Jul 202600:00	–	almalinux
AlmaLinux	Important: nodejs:24 security update	28 Jul 202600:00	–	almalinux
BDU FSTEC	The vulnerability of the tar.replace() function in the node-tar library on the Node.js software platform allows a hacker to trigger a denial-of-service attack.	13 Jul 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the src/extract.ts file in the node-tar library of the Node.js software platform allows a hacker to trigger a denial-of-service attack.	13 Jul 202600:00	–	bdu_fstec
Chainguard	CVE-2026-13149 vulnerabilities	21 Jul 202614:17	–	cgr

Source	Link
access	www.access.redhat.com/errata/RHSA-2026:48033
access	www.access.redhat.com/security/cve/CVE-2026-13149
access	www.access.redhat.com/security/cve/CVE-2026-59873
access	www.access.redhat.com/security/cve/CVE-2026-59874
bugzilla	www.bugzilla.redhat.com/2494813
bugzilla	www.bugzilla.redhat.com/2498116
bugzilla	www.bugzilla.redhat.com/2498120
errata	www.errata.almalinux.org/10/ALSA-2026-48033.html

30 Jul 2026 16:44Current

6.5Medium risk

Vulners AI Score6.5

CVSS 49.2

CVSS 3.17.5

EPSS0.00424

SSVC