Security update for nodejs24 (important)

openSUSE security update: security update for nodejs24 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20519-1 Rating: important References: bsc1256572 bsc1256576 bsc1260455 bsc1260460 bsc1260462 bsc1260463 bsc1260480 bsc1260482 bsc1260494...

CVE-2026-33671 affecting package nodejs24 for versions less than 24.14.1-2

CVE-2026-33671 affecting package nodejs24 for versions less than 24.14.1-2. A patched version of the package is available...

CVE-2026-33672 affecting package nodejs24 for versions less than 24.14.1-2

CVE-2026-33672 affecting package nodejs24 for versions less than 24.14.1-2. A patched version of the package is available...

CVE-2026-21716 affecting package nodejs24 for versions less than 24.14.1-1

CVE-2026-21716 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21717 affecting package nodejs24 for versions less than 24.14.1-1

CVE-2026-21717 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-21712 affecting package nodejs24 for versions less than 24.14.1-1

CVE-2026-21712 affecting package nodejs24 for versions less than 24.14.1-1. An upgraded version of the package is available that resolves this issue...

Security update for nodejs24

This update for nodejs24 fixes the following issues: Update to 24.14.1 CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths and can cause a denial of service bsc1256576. CVE-2026-21710: uncaught TypeError exception can cause a denial ...

SUSE-SU-2026:21181-1 Security update for nodejs24

This update for nodejs24 fixes the following issues: Update to version 24.14.1. Security issues fixed: - CVE-2026-21717: trivially predictable hash collisions due to flaw in V8's string hashing mechanism allows for performance degradation via a crafted request bsc1260494. - CVE-2026-21716:...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nodejs24: nodejs24-24.14.1-4.hum1 aarch64, x8664 nodejs24-bin-24.14.1-4.hum1 noarch nodejs24-devel-24.14.1-4.hum1 aarch64, x8664 nodejs24-docs-24.14.1-4.hum1 noarch...

AlmaLinux 10 : nodejs24 (ALSA-2026:1842)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1842 advisory. nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service CVE-2025-594...

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1. A patched version of the package is available...

CVE-2025-27516 affecting package nodejs24 for versions less than 24.13.0-1

CVE-2025-27516 affecting package nodejs24 for versions less than 24.13.0-1. A patched version of the package is available...

RHSA-2026:1842 Red Hat Security Advisory: nodejs24 security update

Bulletin has no description...

Important: Red Hat Security Advisory: nodejs24 security update

An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

AZL-76200 CVE-2025-69418 affecting package nodejs24 24.13.0-1

Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs whose length is not a multipleof 16 bytes can leave the final partial block unencrypted and unauthenticated.Impact summary: The trailing 1-15 bytes of a message may be exposed...

AZL-76335 CVE-2025-10585 affecting package nodejs24 24.13.0-3

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...