{"id":"EUVD-2026-71603","enisaUuid":"ebfcc2b9-53c8-3099-89e0-238843e513db","description":"undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB decompressed-payload limit and then contains a malformed DEFLATE byte, the inflate stream emits a data error with no listener attached, which Node.js treats as a fatal unhandled error and terminates the entire process. Exploitation is remote and unauthenticated, requires no application mistake, and is asymmetric, since roughly 130 KB on the wire expands past the limit and crashes the process, and reconnecting can repeat the crash. This affects undici versions from 6.25.0 up to 6.28.1, from 7.28.0 up to 7.29.1, and from 8.1.0 up to 8.10.2. Users should upgrade to undici 6.28.1, 7.29.1, or 8.10.2.","datePublished":"Sep 4, 2026, 4:20:34 PM","dateUpdated":"Sep 4, 2026, 7:30:54 PM","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v\nhttps://cna.openjsf.org/security-advisories.html\n","aliases":"CVE-2026-85024\nGHSA-3wwx-pv8p-q78v\n","assigner":"openjs","epss":0.41,"enisaIdProduct":[{"id":"6df4a1cf-8f39-3a49-b03a-bf1d89ad80f2","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"7.28.0 \u003c7.29.1"},{"id":"93f34d50-090e-3ee4-ab89-993c160d9d54","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"8.1.0 \u003c8.10.2"},{"id":"94850f08-68fa-35ea-87d6-704a7ade6786","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"6.25.0 \u003c6.28.1"}],"enisaIdVendor":[{"id":"23e97595-57f5-32a6-a164-1f52484b062b","vendor":{"name":"undici"}}],"enisaIdVulnerability":[{"id":"41bea285-ac76-33bc-a4f9-b8b7695fef05","vulnerability":{"id":"CVE-2026-85024","description":"undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit. When a remote peer sends a compressed payload that crosses the built-in 128 MiB decompressed-payload limit and then contains a malformed DEFLATE byte, the inflate stream emits a data error with no listener attached, which Node.js treats as a fatal unhandled error and terminates the entire process. Exploitation is remote and unauthenticated, requires no application mistake, and is asymmetric, since roughly 130 KB on the wire expands past the limit and crashes the process, and reconnecting can repeat the crash. This affects undici versions from 6.25.0 up to 6.28.1, from 7.28.0 up to 7.29.1, and from 8.1.0 up to 8.10.2. Users should upgrade to undici 6.28.1, 7.29.1, or 8.10.2.","datePublished":"Sep 4, 2026, 4:20:34 PM","dateUpdated":"Sep 4, 2026, 7:30:54 PM","status":"PUBLISHED","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v\nhttps://cna.openjsf.org/security-advisories.html\n","enisa_id":"EUVD-2026-71603\n","assigner":"openjs","epss":0.41,"dataProcessed":"Nov 11, 2026, 7:19:21 AM","vulnerabilityProduct":[{"id":"1ba06e49-114e-3662-b364-198c9782c120","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"7.28.0 \u003c7.29.1"},{"id":"cb385096-4927-35da-a7a8-2d449ce21a5a","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"6.25.0 \u003c6.28.1"},{"id":"fa65eeb3-2f00-359f-82ff-6978e27b92d3","product":{"name":"undici","vendor":{"name":"undici"}},"product_version":"8.1.0 \u003c8.10.2"}],"vulnerabilityVendor":[{"id":"ea4812af-4e93-39e3-b97c-8023a1b76a6f","vendor":{"name":"undici"}}]}},{"id":"b922d6dd-8592-32d8-9239-55882789e6e7","vulnerability":{"id":"GHSA-3wwx-pv8p-q78v","description":"undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression","datePublished":"Sep 28, 2026, 9:42:37 PM","dateUpdated":"Sep 28, 2026, 9:42:37 PM","baseScore":0.0,"references":"https://github.com/nodejs/undici/security/advisories/GHSA-3wwx-pv8p-q78v\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-85024\nhttps://github.com/nodejs/undici/commit/07c60d9c7099a910451244afe42861bbdbdd974c\nhttps://github.com/nodejs/undici/commit/4411a238a98e8791da5fff10cc9e3578a7668ed6\nhttps://github.com/nodejs/undici/commit/63cf698b611fecc6ee0a17b185b930051e4b982f\nhttps://cna.openjsf.org/security-advisories.html\nhttps://github.com/nodejs/undici\nhttps://github.com/nodejs/undici/releases/tag/v6.28.1\nhttps://github.com/nodejs/undici/releases/tag/v7.29.1\nhttps://github.com/nodejs/undici/releases/tag/v8.10.2\n","enisa_id":"EUVD-2026-71603\n","aliases":"CVE-2026-85024\nGHSA-3wwx-pv8p-q78v\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:54:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"05fb5868-8f28-3c36-b34d-fe0c0671318e","advisory":{"id":"openSUSE-SU-2026:22111-1","description":"Security update for pi-coding-agent","summary":"Security update for pi-coding-agent","datePublished":"Oct 9, 2026, 3:27:19 PM","dateUpdated":"Nov 10, 2026, 4:03:58 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/2026/opensuse-su-2026_22111-1.json\nhttps://bugzilla.suse.com/1279832\nhttps://bugzilla.suse.com/1283188\nhttps://bugzilla.suse.com/1283392\nhttps://bugzilla.suse.com/1283412\nhttps://www.suse.com/security/cve/CVE-2026-102276/\nhttps://www.suse.com/security/cve/CVE-2026-102277/\nhttps://www.suse.com/security/cve/CVE-2026-102278/\nhttps://www.suse.com/security/cve/CVE-2026-84890/\nhttps://www.suse.com/security/cve/CVE-2026-84933/\nhttps://www.suse.com/security/cve/CVE-2026-84947/\nhttps://www.suse.com/security/cve/CVE-2026-84961/\nhttps://www.suse.com/security/cve/CVE-2026-85008/\nhttps://www.suse.com/security/cve/CVE-2026-85014/\nhttps://www.suse.com/security/cve/CVE-2026-85024/\nhttps://www.suse.com/security/cve/CVE-2026-85152/\n","aliases":"CVE-2026-102276\nCVE-2026-102277\nCVE-2026-102278\nCVE-2026-84890\nCVE-2026-84933\nCVE-2026-84947\nCVE-2026-84961\nCVE-2026-85008\nCVE-2026-85014\nCVE-2026-85024\nCVE-2026-85152\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"279675b6-5e65-35fb-b2d7-575ee3f5c758","product":{"name":"pi-coding-agent-examples-0:1.0.4-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"287cef6e-0138-3a28-bc1e-242170b36a15","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"343c90fe-8485-3ece-ac6a-94079be0e57e","product":{"name":"pi-coding-agent-0:1.0.4-bp160.1.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"33605754-1e13-3ac9-9158-9101ce8e3568","advisory":{"id":"RHSA-2026:66605","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 11, 2026, 3:13:07 PM","dateUpdated":"Nov 7, 2026, 11:44:54 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:66605\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66605.json\n","aliases":"CVE-2026-18540\nCVE-2026-19534\nCVE-2026-84961\nCVE-2026-85024\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"03d24683-d909-3e25-b954-1dc9363ac6a8","product":{"name":"nodejs26-0:26.8.2-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"0b3f9b49-266e-3360-985b-14f9cd1f804e","product":{"name":"nodejs26-full-i18n-1:26.8.2-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"0d1ae607-f5db-3fd8-86ea-f6b2a04d8e45","product":{"name":"nodejs26-npm-bin-0:26.8.2-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"119527d9-b33c-3381-8fa1-0e10ee6ef6fb","product":{"name":"nodejs26-npm-0:11.19.1-1.26.8.2.0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"11debe7b-cb78-3fde-8fb7-d567c2af28bd","product":{"name":"nodejs26-bin-0:26.8.2-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"1f90c315-7f13-3102-b424-63b7ba098282","product":{"name":"nodejs26-bin-0:26.8.2-0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"239c0fa1-1185-35e8-9e83-e028058ef325","product":{"name":"nodejs26-bin-0:26.8.2-0.1.hum1@noarch","vendor":{"name":"Red Hat"}}},{"id":"26f55ba0-8034-3c70-bca1-12242076534c","product":{"name":"nodejs26-bin-1:26.8.2-0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"2948085a-fa00-3155-be40-2bcf4752e95f","product":{"name":"nodejs26-0:26.8.2-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"29faa47c-9a04-3444-aac5-48120a0b27fa","product":{"name":"v8-14.6-devel-0:14.6.202.34-1.26.8.2.0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"2e3b4081-9173-36bc-81d3-07d438197dc9","product":{"name":"nodejs26-npm-bin-1:26.8.2-0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"31484c39-aeb0-38f3-a544-1f59fbbfb075","product":{"name":"v8-14.6-devel-3:14.6.202.34-1.26.8.2.0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"47dc7757-3f96-3430-a668-ad8c8df596f6","product":{"name":"nodejs26-1:26.8.2-0.1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"5633e1ce-de21-31a7-9585-3d57760a2e9f","product":{"name":"v8-14.6-devel-0:14.6.202.34-1.26.8.2.0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"5637c17e-e414-3508-97ab-97551ae14c15","product":{"name":"nodejs26-devel-1:26.8.2-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5f50395a-b7f5-336c-bb9d-87eac98e9c20","product":{"name":"nodejs26-1:26.8.2-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"61759a90-81f1-3b5c-a497-dce36872124d","product":{"name":"nodejs26-full-i18n-0:26.8.2-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6688a108-acef-3567-ae51-ea663a3450d6","product":{"name":"nodejs26-devel-1:26.8.2-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6e264fb6-f261-393c-aa50-981e59848ae2","product":{"name":"nodejs26-libs-1:26.8.2-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"72e3723b-6d76-3801-a076-d769d6f2c531","product":{"name":"nodejs26-devel-0:26.8.2-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7ce8cb37-3fa1-321f-a96f-74f322018cd7","product":{"name":"nodejs26-full-i18n-1:26.8.2-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"7cfd0d38-3dcb-3a24-95d1-b24d36e2e4d6","product":{"name":"nodejs26-npm-bin-1:26.8.2-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"7e7cd77a-c441-3fab-95cc-1bbb7c9f6d0e","product":{"name":"nodejs26-libs-0:26.8.2-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7ef6d293-0c47-350a-a338-23ac34b58f30","product":{"name":"nodejs26-docs-0:26.8.2-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"81720557-17dd-31a1-8942-a9ef0c4e7309","product":{"name":"nodejs26-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"86d15cf0-b1b7-31c8-9cac-cc3fd588c557","product":{"name":"nodejs26-npm-1:11.19.1-1.26.8.2.0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"8a7912a7-36a0-3511-bfe6-288d3fdec64c","product":{"name":"nodejs26-npm-1:11.19.1-1.26.8.2.0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"8f7d6e95-1b1b-3f15-976c-8002950ed854","product":{"name":"v8-14.6-devel-3:14.6.202.34-1.26.8.2.0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"93448b54-0261-340e-9dee-611f749e60b7","product":{"name":"nodejs26-npm-0:11.19.1-1.26.8.2.0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"9424c1ec-14df-3d41-a870-3314d0c91c05","product":{"name":"nodejs26-full-i18n-0:26.8.2-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"a2c8da29-773d-3e00-872d-f682d96e8bc3","product":{"name":"nodejs26-docs-1:26.8.2-0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"b4479e16-a999-3d42-ab64-f23bbec9c3a9","product":{"name":"nodejs26-devel-0:26.8.2-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b6c0572c-0cad-327b-8ab0-1fcf793431f8","product":{"name":"nodejs26-npm-bin-0:26.8.2-0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"ba20f26b-a57a-328b-8bce-8dc35f87b3e2","product":{"name":"nodejs26-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"bcd4fe58-9d86-346e-a32f-c3fee7faf3ec","product":{"name":"nodejs26-1:26.8.2-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"bd46ba0f-3206-3698-a3bc-a4e22567b9dd","product":{"name":"nodejs26-libs-0:26.8.2-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"bdd4c13e-b1f1-367b-8060-dfe32c98c3c1","product":{"name":"nodejs26-0:26.8.2-0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c04e3728-7f5f-33b0-ba04-c9971c36d76f","product":{"name":"nodejs26-bin-1:26.8.2-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"ca94fc43-c7e8-3213-9df2-f6d6be77b255","product":{"name":"nodejs26-docs-0:26.8.2-0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"dd44a5aa-386b-367f-8270-b75a9ccdd26a","product":{"name":"nodejs26-libs-1:26.8.2-0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e84d3ed8-af7f-39e7-8ceb-6bb9eec3ee9a","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"e96f3645-741f-31df-abd5-4ebcec5e46e4","product":{"name":"nodejs26-main@src","vendor":{"name":"Red Hat"}}},{"id":"ef437530-a1b5-33c6-835b-3b5ce306867d","product":{"name":"nodejs26-docs-1:26.8.2-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"fd9a5f59-bc24-3fda-813a-4761cf961d10","product":{"name":"nodejs26-main@noarch","vendor":{"name":"Red Hat"}}}]}},{"id":"66310823-5fea-3292-9aea-0d743194d40e","advisory":{"id":"WID-SEC-W-2026-3596","description":"IBM App Connect Enterprise: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um einen Cross-Site Scripting Angriff durchzuführen.","datePublished":"Sep 27, 2026, 10:00:00 PM","dateUpdated":"Nov 2, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3596.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3596\n","aliases":"CVE-2022-35948\nCVE-2026-13149\nCVE-2026-14257\nCVE-2026-15157\nCVE-2026-1527\nCVE-2026-16728\nCVE-2026-16729\nCVE-2026-18149\nCVE-2026-18540\nCVE-2026-19534\nCVE-2026-2391\nCVE-2026-45820\nCVE-2026-54272\nCVE-2026-63670\nCVE-2026-67213\nCVE-2026-67214\nCVE-2026-69152\nCVE-2026-69192\nCVE-2026-69198\nCVE-2026-73566\nCVE-2026-73646\nCVE-2026-77037\nCVE-2026-77063\nCVE-2026-77078\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-82562\nCVE-2026-83605\nCVE-2026-83606\nCVE-2026-83607\nCVE-2026-83608\nCVE-2026-83609\nCVE-2026-83610\nCVE-2026-83611\nCVE-2026-83612\nCVE-2026-83613\nCVE-2026-83614\nCVE-2026-83615\nCVE-2026-83616\nCVE-2026-83618\nCVE-2026-83619\nCVE-2026-84292\nCVE-2026-84371\nCVE-2026-84375\nCVE-2026-84890\nCVE-2026-84933\nCVE-2026-84947\nCVE-2026-84961\nCVE-2026-85008\nCVE-2026-85014\nCVE-2026-85024\nCVE-2026-85152\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"07b7ce8b-bbd8-3c1d-90ff-e766961cf95b","product":{"name":"IBM Business Automation Workflow","vendor":{"name":"IBM"}}},{"id":"126a9442-eb03-322f-967d-d4b24b4679fa","product":{"name":"App Connect Enterprise","vendor":{"name":"IBM"}}},{"id":"31946ba1-c845-3096-a2a1-adb2b0ac0dce","product":{"name":"IBM QRadar SIEM","vendor":{"name":"IBM"}}},{"id":"4f251418-833c-3fbe-a850-6f2f852b6cf4","product":{"name":"Oracle Linux","vendor":{"name":"Oracle Corporation"}}},{"id":"59e49cee-20d8-32d8-a9a5-ada15dab1413","product":{"name":"13.0.9.0","vendor":{"name":"IBM"}}},{"id":"5fc9732f-beac-33ec-bcf5-eaad4b8af406","product":{"name":"for multiplatforms","vendor":{"name":"IBM"}}},{"id":"6149fcf6-f409-3550-8715-408fbcfd0b7d","product":{"name":"TXSeries","vendor":{"name":"IBM"}}},{"id":"bdee46b9-a477-3528-9be8-952bf9fcd6a4","product":{"name":"12.0.12.30","vendor":{"name":"IBM"}}},{"id":"cc0e223e-7625-359d-8296-dd00c8d08686","product":{"name":"IBM WebSphere Service Registry and Repository","vendor":{"name":"IBM"}}}]}},{"id":"7589f463-028a-3c62-a138-01a39e98af28","advisory":{"id":"RHSA-2026:71017","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 23, 2026, 5:59:20 PM","dateUpdated":"Oct 29, 2026, 9:31:14 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:71017\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71017.json\n","aliases":"CVE-2026-18540\nCVE-2026-19534\nCVE-2026-85024\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"004c033b-dfe1-362d-9c53-b85b7554b0ca","product":{"name":"nodejs24-bin-0:24.21.0-1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"00f0ed41-9998-3fab-9664-b8a6814db5af","product":{"name":"nodejs24-npm-bin-0:11.19.0-1.24.21.0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"06c4e974-962d-314c-8f1b-a94fb2d6768e","product":{"name":"nodejs24-npm-2:11.19.0-1.24.21.0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"11b32ab9-fe19-3d38-af31-1a65e0179e73","product":{"name":"v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"181ecda5-b922-3ab8-8ee7-0652fcdb5363","product":{"name":"nodejs24-0:24.21.0-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"229c4cd5-f433-31a9-8e11-daef7d337a8d","product":{"name":"v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"24b33db9-cad1-34d3-954e-5b9f44939702","product":{"name":"nodejs24-libs-0:24.21.0-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"2fcb6638-bf26-3fbd-96fc-1bb7cdb7f488","product":{"name":"nodejs24-devel-0:24.21.0-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"324ca37f-90ed-3448-b861-5c76d3da7a4f","product":{"name":"nodejs24-devel-1:24.21.0-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"32582703-2b96-3f20-a5ea-ce76f9919acf","product":{"name":"nodejs24-devel-0:24.21.0-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"346919ce-4726-36fa-a554-b12c0735a346","product":{"name":"nodejs24-devel-1:24.21.0-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"3d2810bf-64d5-3e78-97b0-41d9b162f642","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"492f1db4-afb9-3f58-acd0-85786993b82d","product":{"name":"nodejs24-npm-bin-2:11.19.0-1.24.21.0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"562ea030-d634-3d62-938f-8236a0cb1575","product":{"name":"nodejs24-bin-1:24.21.0-1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"57c9f8af-50c5-36cc-90ef-859240d91228","product":{"name":"nodejs24-full-i18n-0:24.21.0-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"60b09d81-b7f5-3bbb-9c8d-9c0aae1dc4e3","product":{"name":"nodejs24-docs-1:24.21.0-1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"6ffe563c-b78d-3e41-810f-a0e3a44a386c","product":{"name":"nodejs24-1:24.21.0-1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"75a07861-79a2-3c0f-9614-312f3e6b4884","product":{"name":"nodejs24-npm-bin-2:11.19.0-1.24.21.0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"7a758a9c-d5b9-38f1-b916-3cd228997d67","product":{"name":"nodejs24-full-i18n-0:24.21.0-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"7e56fb21-0ae1-32eb-b085-ba79cffdc244","product":{"name":"nodejs24-full-i18n-1:24.21.0-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"80e4e5df-8fd4-3d0f-8a52-61e72a718bf1","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"8cb030aa-c790-38f0-99d9-d3e2516c52e4","product":{"name":"nodejs24-libs-1:24.21.0-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"8e00dd75-c482-3bdb-9d71-f83c5e43a17a","product":{"name":"nodejs24-full-i18n-1:24.21.0-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"8e3b239c-9f1c-32d7-a5f5-0e421196c2aa","product":{"name":"nodejs24-docs-0:24.21.0-1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"94b97301-32ec-35fe-9e8a-ba8fcf583453","product":{"name":"nodejs24-npm-0:11.19.0-1.24.21.0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"99cd2d3f-7714-32f4-921e-27648d9377f1","product":{"name":"nodejs24-bin-1:24.21.0-1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"9bb6ea96-acba-390d-a1c6-cdfe44f98ed0","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"9d671a2a-bc76-3419-8e86-9b5a6a2f22de","product":{"name":"nodejs24-npm-bin-0:11.19.0-1.24.21.0.1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"a787e248-b1dc-3d9d-bdd7-f4b1b0ce8036","product":{"name":"nodejs24-npm-0:11.19.0-1.24.21.0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"abde5787-5c16-39a6-bfe6-67757a1f85ed","product":{"name":"nodejs24-0:24.21.0-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"ad439707-af83-3ee1-9847-88f7b716e173","product":{"name":"nodejs24-docs-0:24.21.0-1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"b82af016-25a2-30f1-bd76-8c5d1fee1c93","product":{"name":"nodejs24-1:24.21.0-1.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c6e4177c-8aba-33dc-9ee8-895918971c5d","product":{"name":"nodejs24-libs-1:24.21.0-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c9d6832e-e93e-33ce-bdf8-d3c8f1a0799c","product":{"name":"nodejs24-bin-0:24.21.0-1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"d19eabda-f683-366b-ad44-7f20b2f358d8","product":{"name":"nodejs24-libs-0:24.21.0-1.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"d407341c-e91c-32ce-b1f5-aab8b400d385","product":{"name":"nodejs24-docs-1:24.21.0-1.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"e6de463d-a073-348e-ae4c-89dbb82afc38","product":{"name":"nodejs24-npm-2:11.19.0-1.24.21.0.1.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"ea6689c9-afcd-3e66-a28a-fe53fb71d7e8","product":{"name":"nodejs24-0:24.21.0-1.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"fc98be02-ebe1-3e25-862e-0207133bdc22","product":{"name":"nodejs24-1:24.21.0-1.hum1@x86_64","vendor":{"name":"Red Hat"}}}]}},{"id":"8f618244-d9e1-3c15-bfea-7ac995c17d2a","advisory":{"id":"RHSA-2026:63782","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 4, 2026, 3:47:11 PM","dateUpdated":"Nov 7, 2026, 5:59:03 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:63782\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63782.json\n","aliases":"CVE-2026-84292\nCVE-2026-84394\nCVE-2026-85024\nCVE-2026-85152\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"30ad78d2-5b87-34fd-8bcb-09f82680bdb5","product":{"name":"grafana12-4-main@aarch64","vendor":{"name":"Red Hat"}}},{"id":"49651423-719d-3a4c-aaf0-69d5ef72b04c","product":{"name":"grafana12-4-main@x86_64","vendor":{"name":"Red Hat"}}},{"id":"4cd839f0-1806-33bd-8eff-cc88a454b7fe","product":{"name":"grafana12-4-main@src","vendor":{"name":"Red Hat"}}},{"id":"8e28999b-1ee6-39c9-a21d-9c0c9232c5f6","product":{"name":"grafana12.4-0:12.4.9-0.6.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9f33cbb8-8ae8-3667-8920-369ac530601a","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"af77e5db-9a58-3578-a577-58ea7451a6a9","product":{"name":"grafana12.4-0:12.4.9-0.6.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b6571a4c-6fba-3b6e-a19a-ba4a4f52a341","product":{"name":"grafana12.4-0:12.4.9-0.6.hum1@src","vendor":{"name":"Red Hat"}}}]}}]}