OESA-2026-1951 nodejs security update

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

RHEL 8 : nodejs:20 (RHSA-2025:8514)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8514 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

Moderate: Red Hat Security Advisory: nodejs:20 security update

An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

AlmaLinux 8 : nodejs:20 (ALSA-2025:4461)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:4461 advisory. c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 Tenable has extracted the preceding description block directly from the AlmaLinux security...

GHSA-H9P4-9JQG-J34H vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-JVQW-9MQ6-23H9 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-9HM3-CHGJ-45RM vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-356R-X8G9-VH8C vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-X3WM-M4VJ-P6PX vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-R874-FFH8-2FVJ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-7XRV-Q25V-F95M vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-G526-X7VJ-CFV6 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-X3WM-M4VJ-P6PX vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-H9P4-9JQG-J34H vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-9M48-R3W4-X35V vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-R874-FFH8-2FVJ vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-JVQW-9MQ6-23H9 vulnerabilities

Vulnerabilities for packages: nodejs...

GHSA-9HM3-CHGJ-45RM vulnerabilities

Vulnerabilities for packages: nodejs...

Important: nodejs20

Issue Overview: Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and 7.2.3, undici uses Math.random to choose the boundary for a multipart/form-data request. It is known that the output of Math.random can be predicted if several of its generated values...

RHSA-2024:1687 Red Hat Security Advisory: nodejs:20 security update

Bulletin has no description...