RHSA-2026:54438
Vulnerability from csaf_redhat - Published: 2026-08-12 21:03 - Updated: 2026-09-24 16:23Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
nodejs24:
* nodejs24-24.18.1-0.2.2.hum1 (aarch64, x86_64)
* nodejs24-bin-24.18.1-0.2.2.hum1 (noarch)
* nodejs24-devel-24.18.1-0.2.2.hum1 (aarch64, x86_64)
* nodejs24-docs-24.18.1-0.2.2.hum1 (noarch)
* nodejs24-full-i18n-24.18.1-0.2.2.hum1 (aarch64, x86_64)
* nodejs24-libs-24.18.1-0.2.2.hum1 (aarch64, x86_64)
* nodejs24-npm-11.16.0-1.24.18.1.0.2.2.hum1 (noarch)
* nodejs24-npm-bin-24.18.1-0.2.2.hum1 (noarch)
* v8-13.6-devel-13.6.233.17-1.24.18.1.0.2.2.hum1 (aarch64, x86_64)
* nodejs24-24.18.1-0.2.2.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in undici. A remote attacker, by controlling a server, could exploit a vulnerability in undici's retry handler. When a server sends an incomplete response body and then a non-retryable status, the original response body can become orphaned and never properly closed. This leads to pending promises and streams accumulating, which can exhaust application resources and result in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. The decompress interceptor in undici processes compressed response bodies based on the untrusted Content-Encoding header. A remote attacker can exploit this by sending a small, specially crafted compressed payload, known as a 'compression bomb,' which expands significantly in client memory. This unbounded decompression can lead to memory exhaustion and cause the application to crash, resulting in a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
17 products, the same list as for
CVE-2026-18149
Known not affected
2 products, the same list as for
CVE-2026-18149
Threats
Impact
Moderate
A flaw was found in undici. The software's caching mechanism, when operating in shared cache mode, improperly stores responses that include 'Set-Cookie' headers. This oversight allows an untrusted server to inject cookies into cached responses. Consequently, sensitive cookie information from one user can be inadvertently disclosed to another user accessing the same cached content.
6.5 (Medium)
Affected products
Fixed
17 products, the same list as for
CVE-2026-18149
Known not affected
2 products, the same list as for
CVE-2026-18149
Threats
Impact
Moderate
A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection is unexpectedly closed. This issue can lead to applications processing partial data or encountering unexpected connection disruptions.
6.5 (Medium)
Affected products
Fixed
17 products, the same list as for
CVE-2026-18149
Known not affected
2 products, the same list as for
CVE-2026-18149
Threats
Impact
Moderate
A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security (TLS) certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently, a peer with an otherwise untrusted certificate may be accepted, potentially compromising the integrity of secure communication.
7.4 (High)
Affected products
Fixed
17 products, the same list as for
CVE-2026-18149
Known not affected
2 products, the same list as for
CVE-2026-18149
Threats
Impact
Important
A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without reaching the origin. This can result in an integrity failure, where the client's application state is not updated as expected.
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')Affected products
Fixed
17 products, the same list as for
CVE-2026-18149
Known not affected
2 products, the same list as for
CVE-2026-18149
Threats
Impact
Low
A flaw was found in undici's experimental WebSocketStream client. A remote attacker, operating as an untrusted server, can trigger a Denial of Service (DoS) by closing the TCP connection without a proper WebSocket close handshake. This action causes an unhandled error in the client, leading to the termination of the entire Node.js process.
5.9 (Medium)
Affected products
Fixed
17 products, the same list as for
CVE-2026-18149
Known not affected
2 products, the same list as for
CVE-2026-18149
Threats
Impact
Moderate
A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure and potentially a full authentication bypass. An attacker could exploit this by having a trusted origin accept a malicious token, without contacting the legitimate trusted origin.
7.4 (High)
Affected products
Fixed
17 products, the same list as for
CVE-2026-18149
Known not affected
2 products, the same list as for
CVE-2026-18149
Threats
Impact
Important
References
54 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nnodejs24:\n * nodejs24-24.18.1-0.2.2.hum1 (aarch64, x86_64)\n * nodejs24-bin-24.18.1-0.2.2.hum1 (noarch)\n * nodejs24-devel-24.18.1-0.2.2.hum1 (aarch64, x86_64)\n * nodejs24-docs-24.18.1-0.2.2.hum1 (noarch)\n * nodejs24-full-i18n-24.18.1-0.2.2.hum1 (aarch64, x86_64)\n * nodejs24-libs-24.18.1-0.2.2.hum1 (aarch64, x86_64)\n * nodejs24-npm-11.16.0-1.24.18.1.0.2.2.hum1 (noarch)\n * nodejs24-npm-bin-24.18.1-0.2.2.hum1 (noarch)\n * v8-13.6-devel-13.6.233.17-1.24.18.1.0.2.2.hum1 (aarch64, x86_64)\n * nodejs24-24.18.1-0.2.2.hum1.src (src)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54438",
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-85152",
"url": "https://access.redhat.com/security/cve/CVE-2026-85152"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18149",
"url": "https://access.redhat.com/security/cve/CVE-2026-18149"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84933",
"url": "https://access.redhat.com/security/cve/CVE-2026-84933"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-85008",
"url": "https://access.redhat.com/security/cve/CVE-2026-85008"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84890",
"url": "https://access.redhat.com/security/cve/CVE-2026-84890"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-85014",
"url": "https://access.redhat.com/security/cve/CVE-2026-85014"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-48932",
"url": "https://access.redhat.com/security/cve/CVE-2026-48932"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84961",
"url": "https://access.redhat.com/security/cve/CVE-2026-84961"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84947",
"url": "https://access.redhat.com/security/cve/CVE-2026-84947"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54438.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
"tracking": {
"current_release_date": "2026-09-24T16:23:31+00:00",
"generator": {
"date": "2026-09-24T16:23:31+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:54438",
"initial_release_date": "2026-08-12T21:03:47+00:00",
"revision_history": [
{
"date": "2026-08-12T21:03:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-20T13:06:48+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-24T16:23:31+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"product": {
"name": "nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"product_id": "nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24@24.18.1-0.2.2.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"product": {
"name": "nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"product_id": "nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-devel@24.18.1-0.2.2.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"product": {
"name": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"product_id": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-full-i18n@24.18.1-0.2.2.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"product": {
"name": "nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"product_id": "nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-libs@24.18.1-0.2.2.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"product": {
"name": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"product_id": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-13.6-devel@13.6.233.17-1.24.18.1.0.2.2.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs24-0:24.18.1-0.2.2.hum1@src",
"product": {
"name": "nodejs24-0:24.18.1-0.2.2.hum1@src",
"product_id": "nodejs24-0:24.18.1-0.2.2.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24@24.18.1-0.2.2.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"product": {
"name": "nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"product_id": "nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24@24.18.1-0.2.2.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"product": {
"name": "nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"product_id": "nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-devel@24.18.1-0.2.2.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"product": {
"name": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"product_id": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-full-i18n@24.18.1-0.2.2.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"product": {
"name": "nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"product_id": "nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-libs@24.18.1-0.2.2.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64",
"product": {
"name": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64",
"product_id": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/v8-13.6-devel@13.6.233.17-1.24.18.1.0.2.2.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-bin@24.18.1-0.2.2.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-bin@24.18.1-0.2.2.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-docs@24.18.1-0.2.2.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-docs@24.18.1-0.2.2.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-npm@11.16.0-1.24.18.1.0.2.2.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-npm@11.16.0-1.24.18.1.0.2.2.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product": {
"name": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_id": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-npm-bin@24.18.1-0.2.2.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
},
{
"category": "product_version",
"name": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product": {
"name": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_id": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/nodejs24-npm-bin@24.18.1-0.2.2.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-0:24.18.1-0.2.2.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64"
},
"product_reference": "nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-0:24.18.1-0.2.2.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src"
},
"product_reference": "nodejs24-0:24.18.1-0.2.2.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-0:24.18.1-0.2.2.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64"
},
"product_reference": "nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64"
},
"product_reference": "nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64"
},
"product_reference": "nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64"
},
"product_reference": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64"
},
"product_reference": "nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64"
},
"product_reference": "nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64"
},
"product_reference": "nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms"
},
"product_reference": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
},
"product_reference": "nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64"
},
"product_reference": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
},
"product_reference": "v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-18149",
"cwe": {
"id": "CWE-911",
"name": "Improper Update of Reference Count"
},
"discovery_date": "2026-09-04T17:34:19.339068+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528802"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker, by controlling a server, could exploit a vulnerability in undici\u0027s retry handler. When a server sends an incomplete response body and then a non-retryable status, the original response body can become orphaned and never properly closed. This leads to pending promises and streams accumulating, which can exhaust application resources and result in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to orphaned response body in retry handler",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An attacker-controlled server can trigger a denial of service in applications using undici\u0027s retry handler. This vulnerability allows for resource exhaustion by leaving response bodies orphaned, which can lead to a degradation of service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"known_not_affected": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18149"
},
{
"category": "external",
"summary": "RHBZ#2528802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528802"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18149"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-pmjh-fq2x-6v4x",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-pmjh-fq2x-6v4x"
}
],
"release_date": "2026-09-04T17:21:46.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T21:03:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "workaround",
"details": "Applications utilizing undici should implement an independent request deadline and ensure the response body is explicitly destroyed upon expiration. The bodyTimeout mechanism alone is insufficient to prevent resource exhaustion in this scenario.",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: undici: Denial of Service due to orphaned response body in retry handler"
},
{
"cve": "CVE-2026-84890",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-09-04T17:23:53.949898+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528772"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. The decompress interceptor in undici processes compressed response bodies based on the untrusted Content-Encoding header. A remote attacker can exploit this by sending a small, specially crafted compressed payload, known as a \u0027compression bomb,\u0027 which expands significantly in client memory. This unbounded decompression can lead to memory exhaustion and cause the application to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via unbounded decompression of compressed responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The undici library, used in some Red Hat products, is vulnerable to a denial of service. This occurs when processing untrusted compressed HTTP responses, which can lead to unbounded memory consumption and application crashes. The Moderate severity is due to the requirement of a malicious or faulty upstream server to deliver a specially crafted \u0027compression bomb\u0027 payload.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"known_not_affected": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84890"
},
{
"category": "external",
"summary": "RHBZ#2528772",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528772"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84890",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84890"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84890",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84890"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-3xpg-4rpp-hhhm",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-3xpg-4rpp-hhhm"
}
],
"release_date": "2026-09-04T17:04:28.261000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T21:03:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: undici: Denial of Service via unbounded decompression of compressed responses"
},
{
"cve": "CVE-2026-84933",
"cwe": {
"id": "CWE-524",
"name": "Use of Cache Containing Sensitive Information"
},
"discovery_date": "2026-09-04T17:10:59.058130+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. The software\u0027s caching mechanism, when operating in shared cache mode, improperly stores responses that include \u0027Set-Cookie\u0027 headers. This oversight allows an untrusted server to inject cookies into cached responses. Consequently, sensitive cookie information from one user can be inadvertently disclosed to another user accessing the same cached content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Cross-user cookie disclosure via Set-Cookie caching",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw affects applications that use undici\u0027s shared-cache interceptor (interceptors.cache(), type: \u0027shared\u0027, which is the default) against untrusted or multi-tenant upstream servers. In that configuration, undici stores and re-serves the Set-Cookie header of cached responses, allowing one user\u0027s session cookie to be disclosed to another caller that hits the same cache key, and allowing a malicious upstream to inject cookies into responses served to other users. Applications that only use undici as an HTTP client without enabling the shared cache interceptor, or that only use the private cache mode, are not affected. Red Hat products that bundle undici versions prior to 7.0.0 (5.x/6.x lines) are not affected, as the vulnerable cache interceptor was introduced in undici 7.0.0.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"known_not_affected": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84933"
},
{
"category": "external",
"summary": "RHBZ#2528756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84933",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84933"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84933",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84933"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-2jfj-6hjv-fm6j"
}
],
"release_date": "2026-09-04T16:59:08.807000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T21:03:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "workaround",
"details": "Upgrade to undici 7.29.1 or 8.10.2 (or later), where the shared cache interceptor no longer stores or re-serves responses containing Set-Cookie. Where an immediate upgrade is not possible: use a private cache (type: \u0027private\u0027) for per-user responses instead of the shared cache; avoid caching responses that carry a Set-Cookie header; or, if your service itself acts as a shared cache in front of an untrusted origin, strip Set-Cookie from upstream responses before caching them.",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: undici: Cross-user cookie disclosure via Set-Cookie caching"
},
{
"cve": "CVE-2026-84947",
"cwe": {
"id": "CWE-130",
"name": "Improper Handling of Length Parameter Inconsistency"
},
"discovery_date": "2026-09-04T17:01:36.613728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528754"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici, a Node.js HTTP/1.1 client. When the dump interceptor processes oversized chunked responses that do not declare a Content-Length, it prematurely signals completion. This causes the application to receive an incomplete or empty response body, while the network connection is unexpectedly closed. This issue can lead to applications processing partial data or encountering unexpected connection disruptions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: Undici: Response truncation and connection termination",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact: A flaw in the undici library\u0027s dump interceptor can cause applications to terminate connections and receive truncated data when processing oversized chunked HTTP responses without a Content-Length header. This can lead to application instability and incomplete data handling in Red Hat products that utilize the undici library and are exposed to untrusted HTTP upstreams.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"known_not_affected": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84947"
},
{
"category": "external",
"summary": "RHBZ#2528754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528754"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84947",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84947"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84947",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84947"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-2gqq-gqf2-x968",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-2gqq-gqf2-x968"
}
],
"release_date": "2026-09-04T16:53:11.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T21:03:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: Undici: Response truncation and connection termination"
},
{
"cve": "CVE-2026-84961",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-04T16:52:40.440125+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528735"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici\u0027s BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security (TLS) certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently, a peer with an otherwise untrusted certificate may be accepted, potentially compromising the integrity of secure communication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw only affects applications that construct an undici BalancedPool with a function-valued connect or tls option \u2014 for example, a custom checkServerIdentity callback or connector used for certificate pinning across multiple upstreams. Client, Pool, Agent, and RoundRobinPool destructure these options before the internal JSON-based clone and are not affected. An attacker able to present, on the network path, a TLS endpoint whose certificate the application\u0027s custom validator was written to reject \u2014 but which still satisfies Node.js\u0027s default hostname and chain checks \u2014 can have that certificate silently accepted when the connection goes through BalancedPool, enabling a man-in-the-middle attack against affected connections.\nThis affects undici versions from 7.24.1 up to 7.29.1 and from 8.0.0 up to 8.10.2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"known_not_affected": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84961"
},
{
"category": "external",
"summary": "RHBZ#2528735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84961"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84961",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84961"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3"
}
],
"release_date": "2026-09-04T16:47:55.724000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T21:03:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "workaround",
"details": "Applications that do not use BalancedPool, or that use it without a custom function-valued connect/tls option, are not affected and require no action. As a workaround until packages are updated, avoid using BalancedPool for any connection that relies on custom TLS certificate validation (e.g. certificate pinning); use Client, Pool, or Agent instead, which are unaffected. The permanent fix is upgrading undici to 7.29.1 or later (7.x line) or 8.10.2 or later (8.x line).",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options"
},
{
"cve": "CVE-2026-85008",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-09-04T16:55:29.468757+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528747"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. The cache interceptor incorrectly caches responses to unsafe HTTP methods, such as POST, PUT, or DELETE. A remote attacker can exploit this by providing a cacheable response, leading to subsequent state-changing requests being served from a stale cache entry without reaching the origin. This can result in an integrity failure, where the client\u0027s application state is not updated as expected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Integrity failure due to caching of unsafe HTTP method responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Low impact vulnerability in undici\u0027s cache interceptor can lead to integrity issues by caching responses for unsafe HTTP methods. Under certain default configurations, a malicious remote origin could cause stale or manipulated responses to be served from the cache, bypassing intended state changes. This risk is considered low due to the specific conditions required for exploitation and the limited scope of impact on data integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"known_not_affected": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-85008"
},
{
"category": "external",
"summary": "RHBZ#2528747",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528747"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-85008",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85008"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85008",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85008"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-8436-99hf-9mmv",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-8436-99hf-9mmv"
}
],
"release_date": "2026-09-04T16:42:40.780000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T21:03:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "undici: undici: Integrity failure due to caching of unsafe HTTP method responses"
},
{
"cve": "CVE-2026-85014",
"cwe": {
"id": "CWE-390",
"name": "Detection of Error Condition Without Action"
},
"discovery_date": "2026-09-04T16:41:09.987760+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528712"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici\u0027s experimental WebSocketStream client. A remote attacker, operating as an untrusted server, can trigger a Denial of Service (DoS) by closing the TCP connection without a proper WebSocket close handshake. This action causes an unhandled error in the client, leading to the termination of the entire Node.js process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via WebSocketStream unclean close",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in the `undici` library\u0027s experimental `WebSocketStream` client can lead to a denial of service. An untrusted remote server can crash a vulnerable Node.js client application by abruptly closing a TCP connection without a WebSocket handshake. This affects the availability of applications utilizing `undici` in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"known_not_affected": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-85014"
},
{
"category": "external",
"summary": "RHBZ#2528712",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528712"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-85014",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85014"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85014",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85014"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-rx4f-c7p8-82vq",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-rx4f-c7p8-82vq"
}
],
"release_date": "2026-09-04T16:30:07.996000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T21:03:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "undici: undici: Denial of Service via WebSocketStream unclean close"
},
{
"cve": "CVE-2026-85152",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-09-04T16:41:35.623977+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528717"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When the cache or deduplicate interceptor is directly composed onto a Client or Pool, the destination origin is omitted from cache and request-deduplication keys. This allows a remote attacker to perform cross-origin cache poisoning, leading to information disclosure and potentially a full authentication bypass. An attacker could exploit this by having a trusted origin accept a malicious token, without contacting the legitimate trusted origin.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is present in the undici HTTP client library used by Node.js. When an application composes undici\u0027s Cache or Deduplicate interceptor directly onto a Client or Pool object (rather than onto an Agent), the library\u0027s internal cache and in-flight-request deduplication keys omit the destination origin. As a result, a cached or in-flight response captured for one upstream origin can be returned for a request intended for a different, trusted origin whenever the method, path, and relevant headers match. In the most severe demonstrated scenario, this allowed an attacker-controlled JWT to be accepted by the application as though it had been validated against a legitimate, trusted issuer, without that issuer ever being contacted \u2014 resulting in a full authentication bypass.\nExploitation requires that the affected application attach the Cache or Deduplicate interceptor directly to a Client/Pool \u2014 the default Agent-based dispatch path is not affected, since Agent already carries the origin in its dispatch options \u2014 and that an attacker can influence or collide with the cache/deduplication key for at least one origin the application communicates with.).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"known_not_affected": [
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-85152"
},
{
"category": "external",
"summary": "RHBZ#2528717",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528717"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-85152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-85152"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-85152",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-85152"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vp8m-p9jh-q5pm",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vp8m-p9jh-q5pm"
}
],
"release_date": "2026-09-04T16:36:28.085000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T21:03:47+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54438"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible to undici 8.10.2 or later.",
"product_ids": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@src",
"Red Hat Hardened Images:nodejs24-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-devel-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-docs-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-full-i18n-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@aarch64",
"Red Hat Hardened Images:nodejs24-libs-0:24.18.1-0.2.2.hum1@x86_64",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-0:11.16.0-1.24.18.1.0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-aarch64-rpms",
"Red Hat Hardened Images:nodejs24-npm-bin-0:24.18.1-0.2.2.hum1@noarch@public-hummingbird-x86_64-rpms",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@aarch64",
"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.18.1.0.2.2.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…