Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in brace-expansion

Summary Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to a vulnerability in brace-expansion. CVE-2026-69152 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-69152 DESCRIPTION: The brace-expansion library generates arbitrary...

CLEANSTART-2026-ZB73544 Security fixes in langfuse-worker 3.224.0-r2

Package langfuse-worker version 3.224.0-r2 fixes 2 vulnerabilities: CVE-2026-14257, CVE-2026-69152...

CLEANSTART-2026-RO78361 Security fixes in langfuse 3.224.3-r2

Package langfuse version 3.224.3-r2 fixes 3 vulnerabilities: CVE-2026-69192, CVE-2026-69198, CVE-2026-69152...

CLEANSTART-2026-UX73923 Security fixes in langfuse-worker 3.224.1-r1

Package langfuse-worker version 3.224.1-r1 fixes 25 vulnerabilities: CVE-2026-69152, CVE-2026-14257, ghsa-55q2-fjhq-7xh7, CVE-2026-18446, CVE-2026-69207...

CLEANSTART-2026-WO90836 Security fixes in langfuse-worker 3.224.2-r2

Package langfuse-worker version 3.224.2-r2 fixes 3 vulnerabilities: ghsa-9mqv-5hh9-4cgg, CVE-2026-14257, CVE-2026-69152...

CLEANSTART-2026-SD99351 Security fixes in langfuse 3.224.3-r1

Package langfuse version 3.224.3-r1 fixes 3 vulnerabilities: CVE-2026-69152, CVE-2026-69192, CVE-2026-69198...

CLEANSTART-2026-XV83516 Security fixes in langfuse-worker 3.224.2-r3

Package langfuse-worker version 3.224.2-r3 fixes 2 vulnerabilities: CVE-2026-69152, CVE-2026-14257...

CLEANSTART-2026-ZG72732 Security fixes in langfuse-worker 4.0.0-r2

Package langfuse-worker version 4.0.0-r2 fixes 2 vulnerabilities: CVE-2026-14257, CVE-2026-69152...

CLEANSTART-2026-FQ08456 Security fixes in renovate 44.31.0-r3

Package renovate version 44.31.0-r3 fixes 3 vulnerabilities: CVE-2026-69152, CVE-2026-69192, CVE-2026-67213...

CLEANSTART-2026-TV56088 Security fixes in langfuse-worker 3.225.0-r2

Package langfuse-worker version 3.225.0-r2 fixes 3 vulnerabilities: CVE-2026-14257, CVE-2026-69152, ghsa-9mqv-5hh9-4cgg...

CLEANSTART-2026-GT14873 Security fixes in langfuse-worker 3.224.0-r3

Package langfuse-worker version 3.224.0-r3 fixes 2 vulnerabilities: CVE-2026-14257, CVE-2026-69152...

RHEL 10 : nodejs-nodemon (RHSA-2026:61374)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61374 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion

Summary SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-69152 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and...

Oracle Linux 10 : nodejs22 (ELSA-2026-55541)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55541 advisory. - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 npm/brace-expansion - Fix for CVE-2026-59873 and...

Oracle Linux 9 : nodejs:22 (ELSA-2026-55601)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55601 advisory. - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 Tenable has extracte...

nodejs22 security update

1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219 1:22.23.1-6 - Fix for CVE-2026-69152 1:22.23.1-5 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address 1:22.23.1-4 - Fix CVE-2026-13149 npm/brace-expansion 1:22.23.1-3 - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 node-tar...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs22: nodejs22-22.23.2-2.3.2.hum1 aarch64, x8664 nodejs22-bin-22.23.2-2.3.2.hum1 noarch nodejs22-devel-22.23.2-2.3.2.hum1 aarch64, x8664 nodejs22-docs-22.23.2-2.3.2.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.7.0-1.5.2.hum1 aarch64, x8664 nodejs26-bin-26.7.0-1.5.2.hum1 noarch nodejs26-devel-26.7.0-1.5.2.hum1 aarch64, x8664 nodejs26-docs-26.7.0-1.5.2.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.18.1-0.2.1.hum1 aarch64, x8664 nodejs24-bin-24.18.1-0.2.1.hum1 noarch nodejs24-devel-24.18.1-0.2.1.hum1 aarch64, x8664 nodejs24-docs-24.18.1-0.2.1.hum1 noarch...

SUSE CVE-2026-69152

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...