PT-2026-100136

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100447

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100137

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101690

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102087

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

Fedora 43 : nodejs-undici (2026-67f78e732b)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-67f78e732b advisory. Update to version 7.29.0. Contains fix for CVE-2026-18149. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Fedora 44 : nodejs-undici (2026-90bb0fcd50)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-90bb0fcd50 advisory. Update to version 7.29.0. Contains fix for CVE-2026-18149. Tenable has extracted the preceding description block directly from the Fedora security advisory...

PT-2026-100461

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101325

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100474

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101103

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100367

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100862

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100962

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101079

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101740

Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...

Malicious Package

Overview leda-nodejs-nextjs-sirius is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Fedora 45 : nodejs-undici (2026-25a6102ac6)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-25a6102ac6 advisory. Update to version 7.29.0. Contains fix for CVE-2026-18149. Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2026-18149 affecting package nodejs for versions less than 24.21.0-1

CVE-2026-18149 affecting package nodejs for versions less than 24.21.0-1. An upgraded version of the package is available that resolves this issue...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview adm-zip is a JavaScript implementation for zip data compression for NodeJS. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the inflater process. An attacker can exhaust system memory and disrupt service availability ...