Nodejs:22 Security Update — AlmaLinux 9 (ALSA-2026:47058)
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fix(es): * brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149) * tar: Node-tar: Denial of Service via malforme…
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language.
Security Fix(es):
* brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* tar: Node-tar: Denial of Service via malforme…
Security Fix(es):
* brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* tar: Node-tar: Denial of Service via malformed tar archive header (CVE-2026-59874)
* tar: node-tar: Denial of Service via crafted gzip bomb (CVE-2026-59873)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Architecture | Package | Checksum |
| aarch64 | nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.aarch64.rpm | 12e462f67d5de3040f856e9f1544e71ff7196fb454013312a5ce4550033c2728 |
| aarch64 | nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.aarch64.rpm | 37b7d35ff83d952690d54d6a1bd5380169f7b3909f07bc90fcdab297f3fcf5fa |
| aarch64 | v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.aarch64.rpm | 62e1ca0995ebb1a32fda2249927a9959b66de63068591532e6b38939022faaf7 |
| aarch64 | nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.aarch64.rpm | a116bfd0c3f883212c8782e20b9b0496317562e5205e4b8df81608bc3b1df038 |
| aarch64 | nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.aarch64.rpm | cc5ccbed776279042bc40f1c077c5554976a2897212983f54704f16bad74c28d |
| aarch64 | npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.aarch64.rpm | fbf77fae35c74207bd988d099467fd9b59e94c1a55054e0b184a067c57269adf |
| noarch | nodejs-docs-22.23.1-2.module_el9.8.0+285+5c3b0251.noarch.rpm | 4149d8345a3ce567b08472d195eadff6c3ca00bde93ed53a5ed2e7d7f16946d6 |
| noarch | nodejs-packaging-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm | 69a2494a423d429b8f38a95646b0b58eac35f29de728da6f9b31d29d0a12c210 |
| noarch | nodejs-nodemon-3.1.14-1.module_el9.8.0+285+5c3b0251.noarch.rpm | a9628e7429ef5cf14b877a8372ad29f9f90b850434bddc3188c940493b68bacf |
| noarch | nodejs-packaging-bundler-2021.06-6.module_el9.7.0+227+12323393.noarch.rpm | ff48fa44ce4299dfc604486df6289fe1f7c720e5ffb57aa31f7e35342c057042 |
| ppc64le | nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.ppc64le.rpm | 1b3bfc2828c712eb64981c95b919215c5d17caa24c0afbb86cfa2b31e19a4aaa |
| ppc64le | nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.ppc64le.rpm | 1c2f2e9a477ebd31c2e2d97d2c2004ab31a5a8fb6602b62d27dfd7062039d733 |
| ppc64le | npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.ppc64le.rpm | 21b0e0e605418eeb584d61cb8d43a4dd3d90ec6f48785598c91774d15dfaf667 |
| ppc64le | nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.ppc64le.rpm | 389cb05043f199a8a10bbe523449ee4a37c6987df8274bdd77679374bb6dcbde |
| ppc64le | v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.ppc64le.rpm | 5fc5a0ff63b80bc3abb2371bdb1c4a90e6e83daa646f5bc4bdb3ebd868f259ab |
| ppc64le | nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.ppc64le.rpm | c089813887fc3dc9b283e0ff12b5083d60f6101a579906e6ead0a03a0849f7a6 |
| s390x | nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm | 0e9fa85203629ff244eb30349da21d917e5370a6a1931c32f7f753c89d5d2a3f |
| s390x | nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm | 36d9c56a6307ea4d131791e08f6ecf00f0ced06d74b4899a487d82cff8a43f7d |
| s390x | nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm | 67956aaed5c341f4524d549a16d4bfe492264d9a20a7041ecae254275251e17d |
| s390x | npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.s390x.rpm | 76ce7ad1f8408c910895a98dcab4864f6d0537f25e7168067fe0adf7eb3eeab7 |
| s390x | nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.s390x.rpm | b4f1926fd4af8244816dbc54c418de4e37c8b1ca7cefd3600c7bace40a148ced |
| s390x | v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.s390x.rpm | f35563b26fed3bb9dd85811f1c0233c79847300746c23d74cd4c0390236a5f43 |
| x86_64 | nodejs-devel-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm | 0635e96de4a124740fe3036afd779bfff573fcd49a2bd1b1d0319aa2ed34e9fd |
| x86_64 | nodejs-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm | 0de0e99b05289d2da3cb731b896be3730de19bbe111c3332a05d3e7b3ee4fcce |
| x86_64 | nodejs-libs-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm | 443152d25dca94a50140f1c8c7d0150658d64d51df9a816eeb290697d86172c1 |
| x86_64 | nodejs-full-i18n-22.23.1-2.module_el9.8.0+285+5c3b0251.x86_64.rpm | 51e54c6cb51465e0bbb3e107ae385236bff1476b573b2ac45dd5987f7f72116a |
| x86_64 | v8-12.4-devel-12.4.254.21-1.22.23.1.2.module_el9.8.0+285+5c3b0251.x86_64.rpm | 9b330eeb96528147b93c275ecf65df4c38d7139e8b88c3c55317dd16e98f6f7b |
| x86_64 | npm-10.9.8-1.22.23.1.2.module_el9.8.0+285+5c3b0251.x86_64.rpm | debd49d3a3da28388a2c71c83f3cd0e20528b7da4522d3b66a62be2079676017 |
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System