Red Hat Enterprise Linux 10/rhel10/nodejs-22

Red Hat · Package

3 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
urllib3 allows an unbounded number of links in the decompression chainCVE-2025-66418 · GHSA-GM62-XV2J-4W53Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)CVE-2026-21441 · GHSA-38JV-5279-WG99Version ranges need review.	urllib3 External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
http-cache-semantics: http-cache-semantics: Information disclosure via improper Vary header wildcard validationCVE-2026-93750	Confidential Compute Attestation/build-of-trustee/trustee-rhel9 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9	Red Hat	Medium	No fix reported	Not recorded