RLSA-2026:47060 Important: nodejs:24 security update

🗓️ 28 Jul 2026 18:01:06Reported by GoogleType

osv🔗 osv.dev👁 19 Views

Node.js version 24 security update fixes three Denial of Service vulnerabilities in brace expansion and tar handling.

Reporter	Title	Published	Views	Family All 389
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses brace-expansion which is vulnerable to CVE-2026-13149	3 Aug 202608:35	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie	24 Jul 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in tar affects IBM Netezza Appliance	11 Aug 202606:32	–	ibm
IBM Security Bulletins	Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities	14 Aug 202618:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in tar affects IBM Netezza Appliance	11 Aug 202606:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-13149)	27 Jul 202610:14	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in brace-expansion affects IBM Netezza Appliance	7 Aug 202612:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub	7 Aug 202616:35	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion	19 Aug 202616:00	–	ibm

Source	Link
errata	www.errata.rockylinux.org/RLSA-2026:47060
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

28 Jul 2026 18:25Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

EPSS0.00424