SUSE SLES15: Multiple Vulnerabilities (SUSE-RU-2026:3712-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- RU-2026:3712-1 advisory. Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.5 Added known issue for missing BasicConstraints Critical flag Added a note about...

CLEANSTART-2026-EG71215 Security fix for CVE-2026-13149 applied in: apache-superset 6.0.0-r6, argo-workflows 3.6.19-r7, npm 11.17.0-r2, npm 11.18.0-r0, pulumi 3.248.0-r0, renovate 44.31.0-r1, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-13149 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion

Summary SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-69152 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and...

nodejs:24 security update

nodejs 1:24.18.0-6 - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 memory exhaustion via deeply chained brace groups. as well as CVE-2026-14257 fixed in 5.0.8. 1:24.18.0-5 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address 1:24.18.0-4 - deps: update sqlite to 3.53.4...

Amazon Linux 2023 : nodejs24, nodejs24-devel, nodejs24-full-i18n (ALAS2023-2026-2059)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2059 advisory. brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding '' brace groups. An attack...

MiracleLinux 9 : [security - high] nodejs:22 (AXSA:2026-1561:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1561:01 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed...

MiracleLinux 9 : nodejs:24 (AXSA:2026-1559:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1559:01 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed...

Important: nodejs24

Issue Overview: brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding '' brace groups. An attacker who passes a crafted string to expand, directly or transitively, can cause significant...

Security Bulletin: The Network Threat Analytics App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Network Threat Analytics App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION:...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.52 security and extras update

Red Hat OpenShift Container Platform release 4.18.52 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of Low...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.42 security and extras update

Red Hat OpenShift Container Platform release 4.19.42 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of Low...

RHEL 10 : nodejs22 (RHSA-2026:53298)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53298 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.7.0-1.5.1.hum1 aarch64, x8664 nodejs26-bin-26.7.0-1.5.1.hum1 noarch nodejs26-devel-26.7.0-1.5.1.hum1 aarch64, x8664 nodejs26-docs-26.7.0-1.5.1.hum1 noarch...

RHEL 10 : nodejs-nodemon (RHSA-2026:52394)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52394 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway

Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as a duplicate of CVE-2026-48779. CWE:CWE-770:...

nodejs24 security update

1:24.18.0-3.0.1 - Update upstream references 1:24.18.0-3 - Fix CVE-2026-13149 brace-expansion 1:24.18.0-2 - Fix CVE-2026-59873 and CVE-2026-59874 nodejs-tar...

Oracle Linux 10 : nodejs22 (ELSA-2026-48033)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48033 advisory. - Fix CVE-2026-13149 npm/brace-expansion - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 node-tar - CVE-2026-42338 ip-address HTML escaping fix...

RLSA-2026:47058 Important: nodejs:22 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malform...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses brace-expansion which is vulnerable to CVE-2026-13149

Summary IBM Maximo Application Suite - Visual Inspection component uses brace-expansion which is vulnerable to CVE-2026-13149, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 ...

RHEL 9 : nodejs:22 (RHSA-2026:47058)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47058 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...