Rocky Linux 10.2 [CIQ] Security Update: nodejs-nodemon (crlsa-2026_52841)

The Rocky Linux 10.2 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-202652841 advisory. brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays CVE-2026-69152 Tenable has extracted the preceding description block...

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

A flaw was found in the brace-expansion library. The expand function does not apply maxLength when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is...

CVE-2026-69152

Brace-expansion library vulnerability CVE-2026-69152: expand() mishandles maxLength for intermediate arrays and padded sequences, enabling memory exhaustion or event-loop stalls via attacker-controlled input. Affected versions: <1.1.18, <2.1.4, <3.0.6,