{"id":"EUVD-2026-88551","enisaUuid":"d219b7fd-9dfd-3c04-bc18-4e1448bf8758","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing closing braces by restarting its scan once for each trailing closing brace. The successive full-input rescans with linear working-string growth cause quadratic CPU time and memory pressure that can block the Node.js event loop. The process eventually recovers, making the impact a recoverable CPU denial of service. This issue is fixed in versions 1.1.21, 2.1.7, 3.0.9, and 5.0.12.","datePublished":"Sep 28, 2026, 8:54:46 PM","dateUpdated":"Sep 29, 2026, 7:38:56 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr\nhttps://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96\nhttps://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22\nhttps://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364\nhttps://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\n","aliases":"CVE-2026-102277\nGHSA-q2hr-2g5m-vwhr\n","assigner":"GitHub_M","epss":0.43,"enisaIdProduct":[{"id":"4485f8c2-7785-3aaf-80d7-ae7615527aaa","product":{"name":"brace-expansion","vendor":{"name":"juliangruber"}},"product_version":"\u003c 1.1.21"},{"id":"870747a4-03af-37f3-9d86-881344e0b28f","product":{"name":"brace-expansion","vendor":{"name":"juliangruber"}},"product_version":"4.0.0, \u003c 5.0.12"},{"id":"b9ec74f2-fe44-3cc4-ac92-40633e30509b","product":{"name":"brace-expansion","vendor":{"name":"juliangruber"}},"product_version":"3.0.0, \u003c 3.0.9"},{"id":"d26c6cb1-cf17-3e2b-9e0f-13d3f160363c","product":{"name":"brace-expansion","vendor":{"name":"juliangruber"}},"product_version":"2.0.0, \u003c 2.1.7"}],"enisaIdVendor":[{"id":"4f63ef4c-538b-384b-bae4-af9769c03bdb","vendor":{"name":"juliangruber"}}],"enisaIdVulnerability":[{"id":"47fa9c36-b20e-3629-ac1f-9aac90a4ef03","vulnerability":{"id":"CVE-2026-102277","description":"The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.21, 2.1.7, 3.0.9, and 5.0.12, the expand function handles untrusted {a},b}-shaped patterns with many trailing closing braces by restarting its scan once for each trailing closing brace. The successive full-input rescans with linear working-string growth cause quadratic CPU time and memory pressure that can block the Node.js event loop. The process eventually recovers, making the impact a recoverable CPU denial of service. This issue is fixed in versions 1.1.21, 2.1.7, 3.0.9, and 5.0.12.","datePublished":"Sep 28, 2026, 8:54:46 PM","dateUpdated":"Sep 29, 2026, 7:38:56 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr\nhttps://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96\nhttps://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22\nhttps://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364\nhttps://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\n","enisa_id":"EUVD-2026-88551\n","assigner":"GitHub_M","epss":0.43,"dataProcessed":"Nov 11, 2026, 7:20:40 AM","vulnerabilityProduct":[{"id":"0a7d3275-e86d-3280-acd8-e1287c950116","product":{"name":"brace-expansion","vendor":{"name":"juliangruber"}},"product_version":"2.0.0, \u003c 2.1.7"},{"id":"0fb51ffb-44d0-3303-953c-2af5f55ee4e1","product":{"name":"brace-expansion","vendor":{"name":"juliangruber"}},"product_version":"3.0.0, \u003c 3.0.9"},{"id":"552d3052-acfe-3c0e-9f8c-29575aa2b152","product":{"name":"brace-expansion","vendor":{"name":"juliangruber"}},"product_version":"\u003c 1.1.21"},{"id":"623fd229-64cc-34d2-a85c-e267d5021a2f","product":{"name":"brace-expansion","vendor":{"name":"juliangruber"}},"product_version":"4.0.0, \u003c 5.0.12"}],"vulnerabilityVendor":[{"id":"efe2f77f-2ae7-3c8e-a970-dae167b0b4e7","vendor":{"name":"juliangruber"}}]}},{"id":"ecdd7415-3165-373d-ab08-c2f1ff0b5529","vulnerability":{"id":"GHSA-q2hr-2g5m-vwhr","description":"brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service","datePublished":"Sep 29, 2026, 11:45:39 PM","dateUpdated":"Sep 29, 2026, 11:45:39 PM","baseScore":0.0,"references":"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-q2hr-2g5m-vwhr\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-102277\nhttps://github.com/juliangruber/brace-expansion/commit/33a5ef17b8d800bbfa8c52b14c39043b6aac1a96\nhttps://github.com/juliangruber/brace-expansion/commit/bdff773f98e5988616b7039cc9b508df5d640b22\nhttps://github.com/juliangruber/brace-expansion/commit/c55e67d8d8b1c56a2474afff15c2891166b2d364\nhttps://github.com/juliangruber/brace-expansion/commit/ffdfa3e3806bed17c0874b8f1439b084de354a7e\nhttps://github.com/juliangruber/brace-expansion\n","enisa_id":"EUVD-2026-88551\n","aliases":"GHSA-q2hr-2g5m-vwhr\nCVE-2026-102277\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:54:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"1ff28194-f230-3d33-9d7e-23679c881963","advisory":{"id":"RHSA-2026:74161","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 30, 2026, 11:32:25 PM","dateUpdated":"Nov 7, 2026, 11:44:55 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74161\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74161.json\n","aliases":"CVE-2026-102276\nCVE-2026-102277\nCVE-2026-102278\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"05cae8f9-1f0e-3586-a688-e6adb4403fa4","product":{"name":"nodejs22-devel-1:22.23.3-2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"0bb29e63-d9b8-39bd-b2ec-10a9cd04355b","product":{"name":"nodejs22-bin-0:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"0bfb7eb0-3599-3528-9a3d-d55feb020b7e","product":{"name":"nodejs22-1:22.23.3-2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"1df37a5e-c116-3105-8531-2f26c4e594e7","product":{"name":"nodejs22-full-i18n-0:22.23.3-2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"27fd48be-2179-39e4-8923-043e92421e02","product":{"name":"nodejs22-devel-0:22.23.3-2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"38dccf3d-48f2-3e00-8a2c-1b609ccea8e5","product":{"name":"nodejs22-npm-bin-1:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"3f6fc15c-ce6c-3be8-aec1-29970bb04420","product":{"name":"nodejs22-devel-0:22.23.3-2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"47fb4608-d74e-380a-8ec6-c67a7b8b4f3a","product":{"name":"nodejs22-npm-bin-0:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"4cc7cf71-2553-3ea2-a494-03f6695cf469","product":{"name":"nodejs22-npm-bin-1:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"4d7dd7e8-09e6-3e3a-a546-83f455c942e1","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"4d8fd2b0-dca4-3aa1-b117-bd9a1920ce0f","product":{"name":"nodejs22-devel-1:22.23.3-2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"53e0ce1e-c8cc-3338-91eb-e12e0f203cb2","product":{"name":"nodejs22-npm-0:10.9.9-1.22.23.3.2.3.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"56790096-b2df-3b8c-8a4b-baa16dccfa6e","product":{"name":"v8-12.4-devel-0:12.4.254.21-1.22.23.3.2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"58be5287-ceb6-32b3-8d35-fc26f84122f6","product":{"name":"nodejs22-0:22.23.3-2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5a372738-84a3-3172-954b-1d5dc4d849a7","product":{"name":"nodejs22-docs-1:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"63733e64-8253-3a9f-880c-800159107482","product":{"name":"v8-12.4-devel-0:12.4.254.21-1.22.23.3.2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6da06678-4c95-3a72-9fdb-43c4ff476269","product":{"name":"nodejs22-npm-0:10.9.9-1.22.23.3.2.3.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"6f44bff3-58f5-3865-8ca2-5f36fd7628a4","product":{"name":"nodejs22-npm-1:10.9.9-1.22.23.3.2.3.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"709f8456-eb41-35ed-9417-e6a949a13e10","product":{"name":"v8-12.4-devel-3:12.4.254.21-1.22.23.3.2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"8a1e8dc5-f05c-36ce-ac71-e91b1c4fc538","product":{"name":"nodejs22-libs-1:22.23.3-2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"8c698695-ffcd-3965-b644-a0be3cf3b62a","product":{"name":"v8-12.4-devel-3:12.4.254.21-1.22.23.3.2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"91266ac3-6cee-3b5b-8e24-b71b75cbfb00","product":{"name":"nodejs22-libs-0:22.23.3-2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9170fc66-5408-35db-91e3-a7f641544f31","product":{"name":"nodejs22-0:22.23.3-2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9bdbef60-3f8a-32bf-95c4-68a06905a5ff","product":{"name":"nodejs22-full-i18n-0:22.23.3-2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"9ebead2b-b42c-37a9-8687-e5e18a7efa31","product":{"name":"nodejs22-docs-1:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"9f40cac1-a4b9-3ab7-a617-1cc590027b30","product":{"name":"nodejs22-bin-1:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"afe9f203-0be3-3e31-a297-9a5317f02bf9","product":{"name":"nodejs22-1:22.23.3-2.3.2.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"b342f0bd-6e80-3ea5-8f50-a50dbbe8828f","product":{"name":"nodejs22-npm-bin-0:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"b80ae5a4-31d8-3105-ba24-f2d8d8ce0b2b","product":{"name":"nodejs22-docs-0:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"b932b507-e389-328e-a14a-1ba4c2d523f4","product":{"name":"nodejs22-0:22.23.3-2.3.2.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"c2282b13-0dcd-3151-b53d-c42155bee413","product":{"name":"nodejs22-libs-0:22.23.3-2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c4ddefe3-9256-3447-96db-de1d403a6a12","product":{"name":"nodejs22-libs-1:22.23.3-2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ccb724a6-6bc1-3d00-9681-3fb5be9f0e2e","product":{"name":"nodejs22-full-i18n-1:22.23.3-2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"cefa095b-846c-3658-bbfa-9e038e340a2d","product":{"name":"nodejs22-npm-1:10.9.9-1.22.23.3.2.3.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"d16092c1-0b3c-3e7e-8e9d-e08e9cdd61a1","product":{"name":"nodejs22-bin-0:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"e4ff9a8d-27d9-3240-9413-c70e74e1402b","product":{"name":"nodejs22-full-i18n-1:22.23.3-2.3.2.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f3d084dd-5199-3659-bd3b-bccef87a6656","product":{"name":"nodejs22-docs-0:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"f743bccd-0c5f-3643-960a-2bd01fad05c3","product":{"name":"nodejs22-bin-1:22.23.3-2.3.2.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"f9f6c99e-7266-370c-a7a3-f6595c2e50bc","product":{"name":"nodejs22-1:22.23.3-2.3.2.2.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"2b4fe3a0-fb33-35c5-b439-4525fffa7704","advisory":{"id":"RHSA-2026:74168","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 30, 2026, 11:40:53 PM","dateUpdated":"Nov 7, 2026, 11:42:38 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74168\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74168.json\n","aliases":"CVE-2026-102276\nCVE-2026-102277\nCVE-2026-102278\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"0135bff7-621d-3b85-8327-fe8eea68c626","product":{"name":"nodejs26-npm-bin-1:26.10.0-0.3.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"033fd0b6-a864-379d-8a31-444f59318013","product":{"name":"nodejs26-devel-0:26.10.0-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"0758cfcf-3003-3818-85ae-3efd77092ecd","product":{"name":"nodejs26-full-i18n-0:26.10.0-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"0b7ab4fc-774d-3f37-8584-df9111f18671","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"11a28149-4194-33b1-aaaf-1642970c7420","product":{"name":"nodejs26-npm-bin-0:26.10.0-0.3.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"2153d3b5-2536-3ea0-b406-f2f4d7b946d6","product":{"name":"nodejs26-npm-bin-0:26.10.0-0.3.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"2c1c3c21-9915-3de8-99fc-4c2c2ca482fd","product":{"name":"nodejs26-bin-0:26.10.0-0.3.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"34f83c1f-ff49-398b-ba52-b2a883a9b674","product":{"name":"nodejs26-full-i18n-1:26.10.0-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"3f815c73-f61c-3434-a215-ac3668390cae","product":{"name":"nodejs26-libs-1:26.10.0-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"409b6126-30e6-3ff8-9e68-5eef571fbbef","product":{"name":"nodejs26-full-i18n-1:26.10.0-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"4e77a151-d9bc-347e-82e1-22299fd45106","product":{"name":"nodejs26-npm-1:11.19.1-1.26.10.0.0.3.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"6c4d8ff2-6660-3811-b990-e08a6ad99505","product":{"name":"nodejs26-libs-1:26.10.0-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6e51eeb2-aa80-3709-97ce-932c216af607","product":{"name":"nodejs26-devel-0:26.10.0-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"70896c56-c934-30dd-97a2-b3e4b6500e87","product":{"name":"nodejs26-0:26.10.0-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"72b077ea-7c41-39fb-b360-a4b48c35ac8d","product":{"name":"nodejs26-bin-1:26.10.0-0.3.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"764b26aa-0929-3985-bc65-a74357e8c8a8","product":{"name":"v8-14.6-devel-0:14.6.202.34-1.26.10.0.0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"7ffd22f7-c9f0-34db-8c4c-4548ee6fa73a","product":{"name":"nodejs26-devel-1:26.10.0-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"84746654-cc38-37b2-86bd-fc37f7195b05","product":{"name":"nodejs26-docs-0:26.10.0-0.3.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"85f7c91d-453a-3171-a873-6d656ab60bf0","product":{"name":"v8-14.6-devel-3:14.6.202.34-1.26.10.0.0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"8a438192-1bec-39ca-ab28-ece0c1af5031","product":{"name":"nodejs26-1:26.10.0-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"90f3d07f-c432-3bf7-bbdd-fb0da97f8b23","product":{"name":"nodejs26-libs-0:26.10.0-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"97b1e613-6ab0-36a2-b7ec-c8732f72a943","product":{"name":"v8-14.6-devel-0:14.6.202.34-1.26.10.0.0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9899923a-59df-35d5-999e-4754a7b5d697","product":{"name":"nodejs26-full-i18n-0:26.10.0-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"9ff0f48c-acb1-3a23-9d18-4f35eca5102e","product":{"name":"nodejs26-libs-0:26.10.0-0.3.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"b515b28b-4004-3349-bbd7-6b8834e34cc0","product":{"name":"v8-14.6-devel-3:14.6.202.34-1.26.10.0.0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c1f11223-0fe8-3a4e-80e3-68a5a3ec6a65","product":{"name":"nodejs26-bin-0:26.10.0-0.3.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"c21f25df-77d1-359c-8eed-1d1134740b2c","product":{"name":"nodejs26-1:26.10.0-0.3.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"c29b94da-c3bf-3d2d-b1fe-9fb6d1b12948","product":{"name":"nodejs26-1:26.10.0-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c2da9d3a-a3f3-31d8-a493-b65f0dc4c731","product":{"name":"nodejs26-docs-1:26.10.0-0.3.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"cc1ec7bf-229a-3c53-838c-02c54f37fb54","product":{"name":"nodejs26-npm-1:11.19.1-1.26.10.0.0.3.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"ce55ed0d-7402-3b1c-9e46-24e01e49dcb7","product":{"name":"nodejs26-npm-0:11.19.1-1.26.10.0.0.3.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"d07a2375-6c84-3997-97c4-2ec5bc857ec2","product":{"name":"nodejs26-npm-0:11.19.1-1.26.10.0.0.3.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"d1e98631-88c2-37dc-bdfb-88478f8a6548","product":{"name":"nodejs26-docs-1:26.10.0-0.3.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"d239ddac-d43e-3081-82e3-568fbe61a2f6","product":{"name":"nodejs26-0:26.10.0-0.3.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"e68b16a4-b115-3994-a052-5cd07c1e211a","product":{"name":"nodejs26-0:26.10.0-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"e8fa1814-4da2-306a-8e6a-174427bf4056","product":{"name":"nodejs26-bin-1:26.10.0-0.3.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"ef141b81-3b35-376a-b5d4-a72617c65d7a","product":{"name":"nodejs26-devel-1:26.10.0-0.3.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"f4eea8cb-5164-387b-8d80-f56d478dc72f","product":{"name":"nodejs26-npm-bin-1:26.10.0-0.3.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"f8673256-8e9e-33a9-baea-c4ebbbb0bdab","product":{"name":"nodejs26-docs-0:26.10.0-0.3.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}}]}},{"id":"5e73395d-4f75-368f-93cc-f3e0f35b1021","advisory":{"id":"RHSA-2026:92378","description":"Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update","summary":"An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 29, 2026, 10:34:48 PM","dateUpdated":"Nov 11, 2026, 3:09:39 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:92378\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92378.json\n","aliases":"CVE-2026-101911\nCVE-2026-102276\nCVE-2026-102277\nCVE-2026-102278\nCVE-2026-105481\nCVE-2026-105482\nCVE-2026-105483\nCVE-2026-106069\nCVE-2026-106071\nCVE-2026-106072\nCVE-2026-106073\nCVE-2026-106074\nCVE-2026-111497\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"032572b8-b877-3890-b8ea-200e23300b28","product":{"name":"nodejs-libs-debuginfo-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"057d1d84-0512-3546-a674-03d893865ee2","product":{"name":"nodejs-debuginfo-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"081eff4a-232f-3bd0-b6ed-9c83695351ca","product":{"name":"nodejs-devel-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"083f69a1-b727-38e3-ba68-4cd4be44062f","product":{"name":"nodejs-debugsource-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"25021dc3-b86b-3e2d-89de-45b7db098df6","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.22.1.3.module+el9.8.0+25216+afa2a4a4.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"2bdb01a7-40dd-3a3e-9f2f-6f1c99e85650","product":{"name":"nodejs-debugsource-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"342446fe-8c2a-3573-9cad-180688527d73","product":{"name":"Red Hat Enterprise Linux AppStream (v. 9)","vendor":{"name":"Red Hat"}}},{"id":"34d83d20-8d59-3fe2-8abb-184f34a3598a","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.22.1.3.module+el9.8.0+25216+afa2a4a4.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"3ae59451-6bd7-3601-8ac3-33727176a56e","product":{"name":"nodejs-full-i18n-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"40e27900-7a81-331c-bd15-df8a49e712db","product":{"name":"nodejs-libs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"416dd788-4a1b-3f87-9524-77d3c3434618","product":{"name":"nodejs-nodemon-0:3.1.14-3.module+el9.8.0+24708+e71d2e1d.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"4a3970a7-83e9-3459-ba5a-a86b8881cefa","product":{"name":"nodejs-libs-debuginfo-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"4d46544a-2194-38a0-be60-5f78113615ae","product":{"name":"nodejs-libs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"4e095271-3247-377e-801d-77aca0e6c1af","product":{"name":"npm-1:11.19.1-1.24.22.1.3.module+el9.8.0+25216+afa2a4a4.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"5961140a-0ffa-393f-bd35-cb3759409656","product":{"name":"nodejs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"5ed0ddd4-716a-3447-b3bb-a6e8ff236923","product":{"name":"nodejs-debuginfo-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"608dd9be-3d0e-3caa-be0f-4b024033564f","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.22.1.3.module+el9.8.0+25216+afa2a4a4.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"63e3bed2-de35-399c-8155-ec419c256249","product":{"name":"nodejs-docs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"68e45f09-744f-348e-896c-097608807423","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.22.1.3.module+el9.8.0+25216+afa2a4a4.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"6b8baf3d-d689-3d86-adbd-78196cfcf850","product":{"name":"nodejs-debuginfo-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"72251d3c-3922-3f92-b047-c90da690e700","product":{"name":"nodejs-libs-debuginfo-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"7e5a8b0e-61ea-3b00-9a43-9089123ee65e","product":{"name":"SUSE Liberty Linux 9","vendor":{"name":"SUSE"}}},{"id":"7fb18ce7-16e3-35a4-8b36-4e773ec27c23","product":{"name":"nodejs-libs-debuginfo-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"8362a57f-5b8a-3425-87b4-8a9615049144","product":{"name":"nodejs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"88a66329-e630-3796-851b-098a839f22fb","product":{"name":"nodejs-devel-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"89841f4a-748f-359e-aa97-7bfeb8cd8a08","product":{"name":"nodejs-devel-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"8d9554b7-d601-35cc-9269-2dd49f29c028","product":{"name":"nodejs-libs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"95670615-c501-3f2f-8288-74d9fef1eb46","product":{"name":"nodejs-full-i18n-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"991f6a5f-6176-3b34-bc2c-cd7782bc8508","product":{"name":"nodejs-packaging-0:2021.06-6.module+el9.8.0+24708+e71d2e1d.src::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"a3a69484-ab76-3a41-9f49-afea274f7cca","product":{"name":"nodejs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"a6d6f583-3065-35f3-b06b-797935e3f430","product":{"name":"nodejs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.src::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"b00c0720-3842-3ebb-a0e5-b2890e74f0a2","product":{"name":"nodejs-devel-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"b7717a73-d0ba-38ea-beb4-09763c57a2c4","product":{"name":"nodejs-full-i18n-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"bd680af8-f0a4-36dd-8d12-d24236ae7f49","product":{"name":"nodejs-debugsource-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"c818e0d9-74f7-35b0-8b62-8e555a30bba0","product":{"name":"nodejs-packaging-0:2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"cb8feabf-e6ff-3730-97cc-8e5cfa024e87","product":{"name":"nodejs-full-i18n-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"cf323137-9a22-3c2c-a652-9d5a62933237","product":{"name":"nodejs-nodemon-0:3.1.14-3.module+el9.8.0+24708+e71d2e1d.src::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"d1909cf5-a990-3e42-ac18-e3984676f91d","product":{"name":"nodejs-debugsource-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"d8436cce-baf3-3a5b-be67-aec024054d0f","product":{"name":"nodejs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"ec1183da-5078-38c2-8bc7-53a85d036935","product":{"name":"nodejs-libs-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"f522ab95-e01b-3078-8fa0-5ca53f2576d8","product":{"name":"nodejs-packaging-bundler-0:2021.06-6.module+el9.8.0+24708+e71d2e1d.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"fd7704cd-9f42-31f0-a6c9-b67b8df661c5","product":{"name":"nodejs-debuginfo-1:24.22.1-3.module+el9.8.0+25216+afa2a4a4.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}}]}},{"id":"650bf421-ef21-310b-ae25-eb1f64c05520","advisory":{"id":"RHSA-2026:92376","description":"Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update","summary":"An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.","datePublished":"Oct 29, 2026, 2:26:32 PM","dateUpdated":"Nov 11, 2026, 3:09:39 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:92376\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92376.json\n","aliases":"CVE-2026-101911\nCVE-2026-102276\nCVE-2026-102277\nCVE-2026-102278\nCVE-2026-105481\nCVE-2026-105482\nCVE-2026-105483\nCVE-2026-106069\nCVE-2026-106071\nCVE-2026-106072\nCVE-2026-106073\nCVE-2026-106074\nCVE-2026-111497\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"055e7dbf-6a11-3106-92a7-82829914a7ba","product":{"name":"nodejs-libs-debuginfo-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"05d935b5-0f87-3c5d-8b6e-21c6174f224e","product":{"name":"nodejs-debuginfo-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"0817e3ea-8b70-3733-aae1-1e727b383e10","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.22.1.1.module+el8.10.0+25218+d9e131cb.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"1831ffd7-db8b-32e3-b838-0fb4bcd63056","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.22.1.1.module+el8.10.0+25218+d9e131cb.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"18e7d726-4c22-3bc1-bf1e-11756c5aec63","product":{"name":"nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"19c42af2-875b-3100-a5c1-cfab836fcad0","product":{"name":"nodejs-full-i18n-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"22c9f318-1f5c-3bbe-a022-fb36cfce3cb2","product":{"name":"npm-1:11.19.1-1.24.22.1.1.module+el8.10.0+25218+d9e131cb.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"28a7f03d-3a99-33f0-b82a-160a08c1b378","product":{"name":"nodejs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.src::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"2f8f3829-f637-3972-ab84-a2ab6b931fb2","product":{"name":"nodejs-libs-debuginfo-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"41d02727-a246-3abe-a14f-365e9ae285c9","product":{"name":"nodejs-debugsource-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"44d5527a-9658-3bc4-b7d2-147dcb8e7019","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.22.1.1.module+el8.10.0+25218+d9e131cb.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"4c553ba4-720f-3778-bc5d-9ca4b915199c","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.22.1.1.module+el8.10.0+25218+d9e131cb.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"4d8606ac-36b6-314d-bd97-906d44d015f6","product":{"name":"nodejs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"58ca218d-0e1e-3269-b832-3742f30a938b","product":{"name":"nodejs-docs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"5e7ccb07-fc66-3d9b-b435-799a0c3b885d","product":{"name":"nodejs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"716835e8-2db5-3c9e-9fc7-289d62fed855","product":{"name":"SUSE Liberty Linux 8","vendor":{"name":"SUSE"}}},{"id":"74ac7404-18a4-3130-a3f0-8e720da2663c","product":{"name":"nodejs-libs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"7a0dbf9d-ad3e-32bb-bc3c-2cf94f69109c","product":{"name":"nodejs-debuginfo-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"8349df3c-6e34-35eb-9370-bbb3c22eedff","product":{"name":"nodejs-packaging-0:2021.06-6.module+el8.10.0+24711+b610b202.src::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"8a8b8f14-0632-3a60-aa5e-fc20fa8d837a","product":{"name":"nodejs-libs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"91b5d88a-b096-3366-9c1a-f0c4d3bb949f","product":{"name":"nodejs-debuginfo-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"925a1731-ebb6-3301-b8d8-3d08c4350c30","product":{"name":"nodejs-debugsource-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"94d78c12-fbd0-37a3-b96f-f26804449ce0","product":{"name":"nodejs-debugsource-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"a51d20db-9714-3b0a-ae5d-47b8de504012","product":{"name":"nodejs-libs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"a6b98003-7292-3965-8f3c-33370b4b2c74","product":{"name":"nodejs-packaging-bundler-0:2021.06-6.module+el8.10.0+24711+b610b202.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"ae3181da-25a2-3b2d-adb9-5a2b15aad25d","product":{"name":"nodejs-debugsource-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"b1f70ed8-f808-3076-a52d-464dce8f70e7","product":{"name":"nodejs-libs-debuginfo-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"b3d0c6cb-943d-3acd-b17b-a7b008a8053a","product":{"name":"nodejs-full-i18n-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"b5688828-2c16-386c-a845-2f58f2b29787","product":{"name":"nodejs-libs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"b8117bc6-e319-32e7-b571-42157af2c104","product":{"name":"nodejs-libs-debuginfo-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"b97d0f03-9cd8-3402-bb34-5d6e59d2d50f","product":{"name":"nodejs-devel-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.aarch64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"baa18a87-0fd6-3376-8f58-1d9ecbd5a5e4","product":{"name":"nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.noarch::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"bd00b785-a0b4-3602-8a99-4a54194f5570","product":{"name":"nodejs-devel-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"d1b1d21a-5635-3088-8d32-eb556821e193","product":{"name":"Red Hat Enterprise Linux AppStream (v. 8)","vendor":{"name":"Red Hat"}}},{"id":"d33a4a49-cd1f-3a66-a917-23abcf0013ed","product":{"name":"nodejs-devel-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"d4fc3015-0358-33c1-bd1a-bd009655fda4","product":{"name":"nodejs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"d85ceb96-26d8-36f3-8880-5829e9fe3316","product":{"name":"nodejs-full-i18n-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"db0e1593-84bd-3f7c-ab5c-15779db540fc","product":{"name":"nodejs-debuginfo-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"de873b3a-fbbc-3933-90c1-7fa0d1edd0fa","product":{"name":"nodejs-nodemon-0:3.1.14-2.module+el8.10.0+24711+b610b202.src::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"e3e12a5f-7fbd-390b-8bf4-685d6e0507c1","product":{"name":"nodejs-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.ppc64le::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"ea790fb1-8168-3a25-b9c3-4133e0ba0c46","product":{"name":"nodejs-full-i18n-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.s390x::nodejs:24","vendor":{"name":"Red Hat"}}},{"id":"ef155229-0155-3169-8979-15610124c320","product":{"name":"nodejs-devel-1:24.22.1-1.module+el8.10.0+25218+d9e131cb.x86_64::nodejs:24","vendor":{"name":"Red Hat"}}}]}},{"id":"87da6bb7-b1e0-37b3-b9df-582aa8dc9312","advisory":{"id":"RHSA-2026:74167","description":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","summary":"An update for Red Hat Hardened Images RPMs is now available.","datePublished":"Sep 30, 2026, 11:39:37 PM","dateUpdated":"Nov 7, 2026, 11:40:31 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:74167\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74167.json\n","aliases":"CVE-2026-102276\nCVE-2026-102277\nCVE-2026-102278\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"03ca98d0-9549-3a38-a0bb-163937974519","product":{"name":"nodejs24-0:24.21.0-1.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"0c0cb8a2-e435-339f-af2f-dfb826a7a434","product":{"name":"nodejs24-libs-1:24.21.0-1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"0dde91ed-ae6d-30dc-989a-7fc8a1f159dd","product":{"name":"nodejs24-bin-1:24.21.0-1.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"14d38889-634d-35e8-a09b-711e1b207a29","product":{"name":"nodejs24-npm-bin-2:11.19.0-1.24.21.0.1.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"21688fc3-8665-369b-a4b4-4ca87ac67fd1","product":{"name":"v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"22792d6a-7af2-353b-86e8-444292387acf","product":{"name":"nodejs24-libs-1:24.21.0-1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"311b7cbf-7551-38ac-a451-1168906d62a0","product":{"name":"nodejs24-npm-2:11.19.0-1.24.21.0.1.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"32ed87c3-277b-3226-b527-81656f033075","product":{"name":"nodejs24-0:24.21.0-1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"44dc8d93-9da8-340c-9790-96b56998aa73","product":{"name":"nodejs24-0:24.21.0-1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"5abfd3a9-5897-3451-979e-9b6a0a51c9af","product":{"name":"nodejs24-full-i18n-1:24.21.0-1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"5b5bbb6a-d368-3f63-b49d-9a7d28400b64","product":{"name":"nodejs24-docs-0:24.21.0-1.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"5d8ddc73-72ba-36f2-84c9-ef43dd30d699","product":{"name":"nodejs24-docs-1:24.21.0-1.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"5db79bc9-62b9-324f-8f99-212573b88051","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"5fc655d4-4160-39ec-8563-f52b18575506","product":{"name":"nodejs24-full-i18n-0:24.21.0-1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"63578567-afec-3a1f-b6ee-c90e8573edae","product":{"name":"Red Hat Hardened Images","vendor":{"name":"Red Hat"}}},{"id":"6545bfae-3d57-34ea-a56a-399636d18989","product":{"name":"v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"6d461aad-58c3-331d-8840-c9ff616b84ba","product":{"name":"v8-13.6-devel-3:13.6.233.17-1.24.21.0.1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"6de9a4a0-6cef-3f52-8a28-b19f3f9ff2fc","product":{"name":"nodejs24-devel-0:24.21.0-1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"83719731-f72b-3b30-9952-6718a99580d5","product":{"name":"nodejs24-1:24.21.0-1.2.hum1@src","vendor":{"name":"Red Hat"}}},{"id":"85103b16-36aa-3342-8f3d-e1ddcf8ba372","product":{"name":"nodejs24-npm-0:11.19.0-1.24.21.0.1.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"88aa9dbb-ef65-3299-90ff-a94429dc4d7b","product":{"name":"nodejs24-1:24.21.0-1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"8a19e9b7-b135-3cdd-9dba-ae4c1f958e5d","product":{"name":"nodejs24-full-i18n-0:24.21.0-1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9b062f96-c831-3863-8919-0435b63224a8","product":{"name":"nodejs24-npm-bin-0:11.19.0-1.24.21.0.1.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"9b5ecc5a-e332-32b2-b387-66d95610ec48","product":{"name":"nodejs24-devel-0:24.21.0-1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"9fca982b-18fe-3ae3-9de9-57ea052af3ef","product":{"name":"nodejs24-docs-1:24.21.0-1.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"aa16c779-2c04-3834-b471-b1d8606c6786","product":{"name":"nodejs24-bin-0:24.21.0-1.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"aadaee27-5dfa-312b-b95e-cfae0cadbfac","product":{"name":"nodejs24-docs-0:24.21.0-1.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"ab0a9b9e-b5e4-3317-afa5-cf680cf8460d","product":{"name":"nodejs24-npm-bin-2:11.19.0-1.24.21.0.1.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"af02d73d-4c1e-3219-ae9c-1e9537e4d77d","product":{"name":"nodejs24-libs-0:24.21.0-1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"b0753430-a05d-323e-b3bd-c42c3b35c40e","product":{"name":"nodejs24-npm-0:11.19.0-1.24.21.0.1.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"b68dfa50-21d0-3d39-a0cf-ffdfbfd37183","product":{"name":"nodejs24-npm-2:11.19.0-1.24.21.0.1.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"be63a8d9-a214-3049-8091-326bea3ba387","product":{"name":"nodejs24-full-i18n-1:24.21.0-1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"bf3e0f1f-4284-33e4-a2ef-0f6dea26fcb4","product":{"name":"nodejs24-libs-0:24.21.0-1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"c1d4d9a8-d89a-355e-b6bd-8996f941700d","product":{"name":"nodejs24-devel-1:24.21.0-1.2.hum1@x86_64","vendor":{"name":"Red Hat"}}},{"id":"c9451250-3302-3eac-a347-052c3f4c03e1","product":{"name":"nodejs24-bin-1:24.21.0-1.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"d04366d2-2079-359f-8106-7fc302eff95b","product":{"name":"nodejs24-devel-1:24.21.0-1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}},{"id":"ded33816-5c4d-3886-8c4d-5876b534e062","product":{"name":"nodejs24-npm-bin-0:11.19.0-1.24.21.0.1.2.hum1@noarch@public-hummingbird-x86_64-rpms","vendor":{"name":"Red Hat"}}},{"id":"f7d07afc-4d67-36a4-928d-7411f3460f78","product":{"name":"nodejs24-bin-0:24.21.0-1.2.hum1@noarch@public-hummingbird-aarch64-rpms","vendor":{"name":"Red Hat"}}},{"id":"fc8f0c89-b86d-389d-ab13-197bae443c19","product":{"name":"nodejs24-1:24.21.0-1.2.hum1@aarch64","vendor":{"name":"Red Hat"}}}]}},{"id":"aabd7751-35f2-30fd-ba73-0ec80628c5fa","advisory":{"id":"openSUSE-SU-2026:11967-1","description":"pi-coding-agent-1.0.0-1.1 on GA media","summary":"pi-coding-agent-1.0.0-1.1 on GA media","datePublished":"Oct 2, 2026, 12:00:00 AM","dateUpdated":"Oct 3, 2026, 8:38:57 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11967-1.json\nhttps://www.suse.com/security/cve/CVE-2026-102277/\nhttps://www.suse.com/security/cve/CVE-2026-102278/\n","aliases":"CVE-2026-102277\nCVE-2026-102278\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"16ea4ec0-a5d2-3b7d-9209-1237fb33c88b","product":{"name":"pi-coding-agent-0:1.0.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"21271570-545a-331f-9906-a94aa46785f0","product":{"name":"pi-coding-agent-examples-0:1.0.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"28cdd475-6737-317a-9178-d97042f541de","product":{"name":"pi-coding-agent-0:1.0.0-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"7d458467-d8eb-3e84-abd2-4758b25807af","product":{"name":"pi-coding-agent-0:1.0.0-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"7f633970-9982-393e-89cf-a9a15294ef46","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"a2c3529b-e72b-3818-b781-32b313152d0e","product":{"name":"pi-coding-agent-examples-0:1.0.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"c1ab0112-6a09-32b3-8743-b1f334ed4a6e","product":{"name":"pi-coding-agent-0:1.0.0-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"c85e9da9-46d4-3f18-8654-df967b4f230d","product":{"name":"pi-coding-agent-examples-0:1.0.0-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d0c8a82c-32c8-3694-9163-ed956123e8f6","product":{"name":"pi-coding-agent-examples-0:1.0.0-1.1.ppc64le","vendor":{"name":"SUSE"}}}]}},{"id":"d5774faa-ec63-355d-bfa3-d784bf7222c3","advisory":{"id":"openSUSE-SU-2026:22111-1","description":"Security update for pi-coding-agent","summary":"Security update for pi-coding-agent","datePublished":"Oct 9, 2026, 3:27:19 PM","dateUpdated":"Nov 10, 2026, 4:03:58 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/2026/opensuse-su-2026_22111-1.json\nhttps://bugzilla.suse.com/1279832\nhttps://bugzilla.suse.com/1283188\nhttps://bugzilla.suse.com/1283392\nhttps://bugzilla.suse.com/1283412\nhttps://www.suse.com/security/cve/CVE-2026-102276/\nhttps://www.suse.com/security/cve/CVE-2026-102277/\nhttps://www.suse.com/security/cve/CVE-2026-102278/\nhttps://www.suse.com/security/cve/CVE-2026-84890/\nhttps://www.suse.com/security/cve/CVE-2026-84933/\nhttps://www.suse.com/security/cve/CVE-2026-84947/\nhttps://www.suse.com/security/cve/CVE-2026-84961/\nhttps://www.suse.com/security/cve/CVE-2026-85008/\nhttps://www.suse.com/security/cve/CVE-2026-85014/\nhttps://www.suse.com/security/cve/CVE-2026-85024/\nhttps://www.suse.com/security/cve/CVE-2026-85152/\n","aliases":"CVE-2026-102276\nCVE-2026-102277\nCVE-2026-102278\nCVE-2026-84890\nCVE-2026-84933\nCVE-2026-84947\nCVE-2026-84961\nCVE-2026-85008\nCVE-2026-85014\nCVE-2026-85024\nCVE-2026-85152\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"279675b6-5e65-35fb-b2d7-575ee3f5c758","product":{"name":"pi-coding-agent-examples-0:1.0.4-bp160.1.1.noarch","vendor":{"name":"SUSE"}}},{"id":"287cef6e-0138-3a28-bc1e-242170b36a15","product":{"name":"openSUSE Leap 16.0","vendor":{"name":"SUSE"}}},{"id":"343c90fe-8485-3ece-ac6a-94079be0e57e","product":{"name":"pi-coding-agent-0:1.0.4-bp160.1.1.noarch","vendor":{"name":"SUSE"}}}]}},{"id":"ee4fdb18-8c4c-39a0-9209-e7faf00ad933","advisory":{"id":"openSUSE-SU-2026:12424-1","description":"agama-web-ui-25+475.275dd4727-56.1 on GA media","summary":"agama-web-ui-25+475.275dd4727-56.1 on GA media","datePublished":"Nov 5, 2026, 12:00:00 AM","dateUpdated":"Nov 6, 2026, 11:27:04 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_12424-1.json\nhttps://www.suse.com/security/cve/CVE-2026-102277/\nhttps://www.suse.com/security/cve/CVE-2026-110725/\nhttps://www.suse.com/security/cve/CVE-2026-111181/\nhttps://www.suse.com/security/cve/CVE-2026-111755/\nhttps://www.suse.com/security/cve/CVE-2026-111756/\nhttps://www.suse.com/security/cve/CVE-2026-115754/\nhttps://www.suse.com/security/cve/CVE-2026-115897/\nhttps://www.suse.com/security/cve/CVE-2026-116689/\nhttps://www.suse.com/security/cve/CVE-2026-75899/\nhttps://www.suse.com/security/cve/CVE-2026-84369/\nhttps://www.suse.com/security/cve/CVE-2026-86472/\n","aliases":"CVE-2026-102277\nCVE-2026-110725\nCVE-2026-111181\nCVE-2026-111755\nCVE-2026-111756\nCVE-2026-115754\nCVE-2026-115897\nCVE-2026-116689\nCVE-2026-75899\nCVE-2026-84369\nCVE-2026-86472\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"486d15c2-50b2-3d14-82c4-ef8800a44043","product":{"name":"agama-web-ui-0:25+475.275dd4727-56.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"7afbf6cf-17e3-3ee3-8f5e-f1696dfda2b6","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"9dad7d9d-ddac-3ff0-86e4-ec69c2dbd48e","product":{"name":"agama-web-ui-0:25+475.275dd4727-56.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"b65f04a4-68ae-37e6-9622-415a582851e7","product":{"name":"agama-web-ui-0:25+475.275dd4727-56.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"eb07add7-373a-316e-92e5-2bcf270e7c3f","product":{"name":"agama-web-ui-0:25+475.275dd4727-56.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"f1244469-126d-3e19-8977-296314b63dd2","advisory":{"id":"msrc_CVE-2026-102277","description":"brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service","datePublished":"Oct 1, 2026, 1:19:25 AM","dateUpdated":"Oct 16, 2026, 1:46:09 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-102277.json\n","aliases":"CVE-2026-102277\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"0defbae0-21ef-3b9d-bd14-64714af94e71","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"1b9971df-149a-3c46-be19-5e780d6019a1","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"3e52b04f-e76f-3d77-a6ba-ab51885d52ce","product":{"name":"azl3 python-tensorboard 0:2.16.2-6.azl3","vendor":{"name":"Microsoft"}}}]}}]}