Nodejs:24 Security Update — AlmaLinux 9 (ALSA-2026:47057)
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malforme…
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
* brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* tar: Node-tar: Denial of Service via malforme…
Security Fix(es):
* brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874)
* tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Architecture | Package | Checksum |
| aarch64 | nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.aarch64.rpm | 0d53b85ef36e97f563d17d7890e6c6d752f816543aae3b4db306c3771cb84e86 |
| aarch64 | v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.aarch64.rpm | 54b0afaa81cf0251855d3e9a17dfe492b7b5a22de465b635c0f5bea82bd00e4b |
| aarch64 | nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.aarch64.rpm | 6b9dddbb720662d54f016188811f334524d00bcb4b16e3e9cc4b2560b6e913e2 |
| aarch64 | nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.aarch64.rpm | 772de51c5b172173c06282a73edfd810f4b7c058046c6ea1a9b9b19b6c7a460d |
| aarch64 | nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.aarch64.rpm | d625fb3fde66e4b77edba91763444c89a960dacf9ecb4c45df5056b047e1c1fc |
| noarch | nodejs-packaging-bundler-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm | 704a51a642368ad73aefcbfa86b6b81f61c5541bc314bfdc63475e674964be6a |
| noarch | npm-11.16.0-1.24.18.0.3.module_el9.8.0+286+9023ffdb.noarch.rpm | 8e61e682f568aab5e0ffee64e8f19d13ab323ff7264dcd0039237189a351dc87 |
| noarch | nodejs-nodemon-3.1.14-2.module_el9.8.0+286+9023ffdb.noarch.rpm | b09ddf0f03d8df5ac2e78c82a437fb736aa7f4abb64e9b6c426b73e5e6f5d7bd |
| noarch | nodejs-packaging-2021.06-6.module_el9.7.0+209+ecf6523e.noarch.rpm | e12d6593295b63bbaffb1d59469018386e8cf5428b60b3671861a3b9e68d1fc4 |
| noarch | nodejs-docs-24.18.0-3.module_el9.8.0+286+9023ffdb.noarch.rpm | e962b7e2f2384848cee4bf0f840c21d10d7f29262944b3f62f55483d1ebb568c |
| ppc64le | nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.ppc64le.rpm | 01d37179367bfda683cf133ebbf86652360ebba5acf4fe6e30f013d5fafa7243 |
| ppc64le | nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.ppc64le.rpm | 0f3f56112a6019a8aea1754b0f142dce2b457cca0b1b76773692a26f4c2ad0ae |
| ppc64le | nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.ppc64le.rpm | 8fa4ab743bc1f917deae5bbd45ca49699a22afd483a41b6065f4aa40345af1b4 |
| ppc64le | v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.ppc64le.rpm | 9a878e7bf95b2d880ccdb8ac455aaa8c2b5fcc96fedc15ee36104771dc776d25 |
| ppc64le | nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.ppc64le.rpm | b158d20b00a800edcdf74ff7964c0400dd20a57747d852971358dd2cdaa6359d |
| s390x | nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm | 053c944b46970fa1a81fb84fd65c14377573fb8935addc580e429457bd697832 |
| s390x | nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm | 4c4572930d342be70f9928952eba2876fbeeb70b102f38bf96565935dd7a3a55 |
| s390x | nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm | 6d3209d5838f880c71651d41ee0c7532290d0f4d7862e6445eb2c3a1f100341f |
| s390x | v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.s390x.rpm | 7e79c24c04a1a88c7d411eee88ccb7359d0bc1402b4a5fdd6fc4af4cbbd7da75 |
| s390x | nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.s390x.rpm | c88929687bc8c29d82260aef8d447ca94b7656319be012c7e22ee398c8d5822f |
| x86_64 | nodejs-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm | 16c08207394e16d85af7150c7fea3122aab98755e1912812aff2a2ef1e64e08c |
| x86_64 | nodejs-full-i18n-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm | 78871dba67f073f37329a8f44a79398f11f1216fa20a86cc7b3a473e385ee3e6 |
| x86_64 | nodejs-libs-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm | bb2e1683d975b818de04a43c990ad5c74a3634871d3f18d2aa1b3f68072865f7 |
| x86_64 | v8-13.6-devel-13.6.233.17-1.24.18.0.3.module_el9.8.0+286+9023ffdb.x86_64.rpm | c4dce6818802abb6fa7adcec32a4ef093b53309cbf09c176a123aff3290bd074 |
| x86_64 | nodejs-devel-24.18.0-3.module_el9.8.0+286+9023ffdb.x86_64.rpm | f133c1e46f085ab631c7c537729f4dc33dc7308181006b1ccf1fe2237b7b1331 |
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System