[CLSA-2026:1792427796] alt-nodejs14-nodejs: Fix of CVE-2026-58044
Type:
security
Severity:
Moderate
Release date:
2026-10-19 16:36:47 UTC
Description:
- CVE-2026-58044: enforce maxHeadersCount in the HTTP parser, so a request carrying more header pairs than configured is rejected instead of silently truncated
CVEs fixed:
Updated packages:
  • alt-nodejs14-nodejs-14.21.3-36.el7.x86_64.rpm
    sha:9ec301980aa8d69c7ab2b8ee835c10fb9ee2189c0cafc5c2e5ba38574d99ada5
  • alt-nodejs14-nodejs-devel-14.21.3-36.el7.x86_64.rpm
    sha:96d7bf2091bcd2d8357128c20d34748054c90354dae732e822e4fbb8eafb0efa
  • alt-nodejs14-nodejs-docs-14.21.3-36.el7.noarch.rpm
    sha:39f195ad0c2515ad3e112fc38c18becfadb0d21bd635b963fd909cb9eb50c024
  • alt-nodejs14-npm-6.14.18-14.21.3.36.el7.x86_64.rpm
    sha:d2f325f4d469acb68e88354b101f065257ff39b07f0ffa2c8c70fb7ec6ecfe67
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.