RHSA-2026:35891 Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update

🗓️ 07 Jul 2026 10:09:31Reported by GoogleType

osv

osv🔗 osv.dev👁 5 Views

Red Hat advisory for nodejs version twenty four security, bug fix, and enhancement update.

Reporter	Title	Published	Views	Family All 849
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Cross-site Scripting due to Node.js modules ip-address and sanitize-html (CVE-2026-53606 & CVE-2026-42338)	23 Jul 202608:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses undici which is vulnerable to CVE-2026-11525, CVE-2026-12151, CVE-2026-6733, CVE-2026-9679	3 Aug 202611:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules	31 Jul 202614:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses ip-address-10.1.0.tgz and fast-xml-builder-1.1.5.tgz which are vulnerable to CVE-2026-44664, CVE-2026-44665 and CVE-2026-42338.	30 Jun 202607:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses ip-address-10.1.0.tgz which is vulnerable to CVE-2026-42338	29 Jun 202615:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	30 Jul 202617:10	–	ibm
IBM Security Bulletins	Security Bulletin: Data Synchronization App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 Jul 202614:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in ip-address-9.0.5.tgz	9 Jun 202615:26	–	ibm
ATTACKERKB	CVE-2026-48935	26 Jun 202601:14	–	attackerkb

Source	Link
access	www.access.redhat.com/errata/RHSA-2026:35891
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

03 Aug 2026 10:14Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.18.1

EPSS0.03711

Red Hat advisory nodejs version twenty four security update