{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-105481: http: close the keep-alive response-queue desynchronisation\n that the CVE-2026-48931 data guard left open, by checking for bytes already\n queued in the socket's kernel receive buffer before a free socket is handed to\n a new request -- that guard is driven by libuv's read callback and so never\n fires for bytes that arrive after the last event-loop poll, letting a reused\n socket answer the next request with a response written before it was sent\n- CVE-2026-105482: dns: reject resolver inputs containing NUL bytes, by routing\n every resolve method of both the callback and the promises API through\n validateStringWithoutNullBytes() -- c-ares takes a NUL-terminated C string, so\n a name such as \"example.com\\0.trusted.corp\" was silently truncated and\n queried as \"example.com\" instead\n- CVE-2026-105483: tls: reject non-canonical IP addresses in server identity\n checks, so a fullwidth spelling of an address is no longer routed to the\n DNS-name branch of checkServerIdentity() and matched against a DNS SAN\n- CVE-2026-106069: tls: same fix -- a host that loosely resolves to an IP\n address is no longer authenticated by a DNS-name identifier\n- CVE-2026-106072: tls: same fix -- non-canonical IPv4 spellings such as\n 0177.0.0.1, 0x7f.0.0.1, 2130706433 and 127.1 answer 0 from net.isIP() and were\n therefore matched as domain names, letting a DNS SAN authenticate an IP endpoint\n- CVE-2026-106071: src: fix the fs permission tree node on wildcard nodes, by\n bounding the prefix walk in FSPermission::RadixTree::Node::NextNode() with the\n length of the child's prefix instead of the length of the queried path, so a\n path shorter than the prefix no longer runs off the end of the loop and\n returns the child as a match on a proper prefix alone\n- CVE-2026-106073: permission: check the permission model in fs.realpathSync(),\n which walked the path through binding.lstat(), binding.stat() and\n binding.readlink() directly instead of the checked public wrappers, so the\n synchronous walk ran unchecked where realpathSync.native(), fs.realpath() and\n fs.promises.realpath() all denied\n- CVE-2026-106074: crypto: reset the randomUUID() and randomInt() entropy caches\n across snapshots, so a user-land startup snapshot or a single executable\n application no longer captures a primed cache and replays the same UUIDs and\n integers in every process launched from it\n- CVE-2026-111497: deps: cherry-pick brotli 0ed4268a4401, so a block switch in a\n meta-block that declared NBLTYPES=1 is reported as a format error instead of\n being returned as BROTLI_FALSE -- which the unsafe decoder path discarded into\n a tight infinite loop and the safe path turned into a permanent\n NEEDS_MORE_INPUT, hanging any decode of attacker-supplied Brotli", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_nodejs/el7/advisories/2026/clsa-2026_1792744592.json" } ], "tracking": { "current_release_date": "2026-10-23T08:38:12Z", "generator": { "date": "2026-10-23T08:38:12Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792744592", "initial_release_date": "2026-10-23T08:38:12Z", "revision_history": [ { "date": "2026-10-23T08:38:12Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "alt-nodejs20-nodejs: Fix of 10 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 7", "product": { "name": "Community Enterprise Operating System 7", "product_id": "CentOS-7", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.15.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-15.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-15.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-14.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-14.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.14.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-13.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.13.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-13.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.12.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-12.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-12.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.11.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-11.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-11.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-9.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-9.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.9.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.6.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-6.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-6.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.3.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "product": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "product_id": "alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-npm@10.8.2-20.20.2.2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "product_id": "alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs@20.20.2-2.el7?arch=x86_64&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "product": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "product_id": "alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-devel@20.20.2-2.el7?arch=x86_64&os_name=centos&os_version=7" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-15.el7?arch=noarch&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-14.el7?arch=noarch&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-13.el7?arch=noarch&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-12.el7?arch=noarch&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-11.el7?arch=noarch&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-9.el7?arch=noarch&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-6.el7?arch=noarch&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-3.el7?arch=noarch&os_name=centos&os_version=7" } } }, { "category": "product_version", "name": "alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "product": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "product_id": "alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs20-nodejs-docs@20.20.2-2.el7?arch=noarch&os_name=centos&os_version=7" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64" }, "product_reference": "alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch" }, "product_reference": "alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "relates_to_product_reference": "CentOS-7" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64 as a component of Community Enterprise Operating System 7", "product_id": "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64" }, "product_reference": "alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "relates_to_product_reference": "CentOS-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-111497", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-111497" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-106071", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-106071" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-105482", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-105482" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-105483", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-105483" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-106074", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-106074" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-105481", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-105481" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-106073", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-106073" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-106072", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-106072" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-48932", "notes": [ { "category": "description", "text": "A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers while piping the original body to a reused backend connection.\r\n\r\nNode.js can omit headers beyond `maxHeadersCount` / `maxHeaderPairs` from `req.headers`, `req.rawHeaders`, and `req.headersDistinct`, while still using those omitted headers internally for HTTP message framing. In particular, `Content-Length` can be hidden from userland while the request body is still delivered.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-48932" } ], "release_date": "2026-09-01T02:08:29Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "date": "2026-09-01T02:08:29Z", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-106069", "notes": [ { "category": "description", "text": "Hand-built record: no CVE database had this CVE at ingestion.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "known_affected": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-106069" } ], "remediations": [ { "category": "vendor_fix", "date": "2026-10-23T08:36:34.536566Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-15.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-15.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.15.el7.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1792744592" }, { "category": "none_available", "details": "Affected", "product_ids": [ "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-11.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-12.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-13.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-14.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-2.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-3.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-6.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-devel-0:20.20.2-9.el7.x86_64", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-11.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-12.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-13.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-14.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-2.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-3.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-6.el7.noarch", "CentOS-7:alt-nodejs20-nodejs-docs-0:20.20.2-9.el7.noarch", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.11.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.12.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.13.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.14.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.2.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.3.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.6.el7.x86_64", "CentOS-7:alt-nodejs20-npm-0:10.8.2-20.20.2.9.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] } ] }