Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion

Summary SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-69152 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and...

Oracle Linux 9 : nodejs:22 (ELSA-2026-55601)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55601 advisory. - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 Tenable has extracte...

Oracle Linux 10 : nodejs22 (ELSA-2026-55541)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55541 advisory. - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 npm/brace-expansion - Fix for CVE-2026-59873 and...

nodejs22 security update

1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219 1:22.23.1-6 - Fix for CVE-2026-69152 1:22.23.1-5 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address 1:22.23.1-4 - Fix CVE-2026-13149 npm/brace-expansion 1:22.23.1-3 - Fix for CVE-2026-59873 and Fix for CVE-2026-59874 node-tar...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs22: nodejs22-22.23.2-2.3.2.hum1 aarch64, x8664 nodejs22-bin-22.23.2-2.3.2.hum1 noarch nodejs22-devel-22.23.2-2.3.2.hum1 aarch64, x8664 nodejs22-docs-22.23.2-2.3.2.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs26: nodejs26-26.7.0-1.5.2.hum1 aarch64, x8664 nodejs26-bin-26.7.0-1.5.2.hum1 noarch nodejs26-devel-26.7.0-1.5.2.hum1 aarch64, x8664 nodejs26-docs-26.7.0-1.5.2.hum1 noarch...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.18.1-0.2.1.hum1 aarch64, x8664 nodejs24-bin-24.18.1-0.2.1.hum1 noarch nodejs24-devel-24.18.1-0.2.1.hum1 aarch64, x8664 nodejs24-docs-24.18.1-0.2.1.hum1 noarch...

SUSE CVE-2026-69152

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...

RLSA-2026:52841 Important: nodejs-nodemon security update

Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch the files in the directory in which nodemon was started, and if any files change, nodemon will automatically restart your node application. nodemon does...

nodejs-nodemon security update

An update is available for nodejs-nodemon. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Simple monitor script for use during development of a node.js app. Fo...

RockyLinux 10 : nodejs-nodemon (RLSA-2026:52841)

The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:52841 advisory. brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays CVE-2026-69152 Tenable has extracted the preceding description block...

Important: Red Hat Security Advisory: nodejs-nodemon security update

An update for nodejs-nodemon is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

ALSA-2026:52841 Important: nodejs-nodemon security update

Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch the files in the directory in which nodemon was started, and if any files change, nodemon will automatically restart your node application. nodemon does...

nodejs-nodemon security update

3.1.14-3 - Fix CVE-2026-69152 - brace-expansion...

RHEL 10 : nodejs-nodemon (RHSA-2026:52841)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:52841 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

Oracle Linux 10 : nodejs-nodemon (ELSA-2026-52841)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-52841 advisory. 3.1.14-3 - Fix CVE-2026-69152 - brace-expansion Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.5.1.hum1 aarch64, x8664 grafana13.1-13.1.1-0.5.1.hum1.src src Security Fixes: grafana13.1: CVE-2026-69152 CVE-2026-69153...

@activepieces/piece-google-gemini (0.1.6), @activepieces/piece-google-vertexai (0.1.2) +8 more potentially affected by CVE-2026-69152 via brace-expansion (>=2.0.0, <=2.0.2)

brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2026-69152 Source advisory: OSV:GHSA-RGW5-RVV9-X895...

@algolia/coquille (>=0.0.2, <=0.0.13), @candlelabs/sdk (>=1.0.1, <=1.0.2) +28 more potentially affected by CVE-2026-14257 +1 more via brace-expansion (>=1.1.0, <=1.1.16)

brace-expansion NPM version =1.1.0, =0.0.2, =1.0.1, =0.0.1, =0.1.0, =1.0.0, =1.0.0, =2.9.6-canary.2, =0.0.3, =0.1.0 and more Source cves: CVE-2026-14257, CVE-2026-69152 Source advisory: SNYK:JS-BRACEEXPANSION-18512280...

@activepieces/piece-google-gemini (0.1.6), @activepieces/piece-google-vertexai (0.1.2) +8 more potentially affected by CVE-2026-14257 +1 more via brace-expansion (>=2.0.0, <=2.0.2)

brace-expansion NPM version =2.0.0, =0.2.1, =1.16.0, =1.0.1, =0.0.20, =15.0.0 - fluid-webdriver 1.1.2 - nx-cargo 1.0.0-alpha.2 Source cves: CVE-2026-14257, CVE-2026-69152 Source advisory: SNYK:JS-BRACEEXPANSION-18512280...