Red Hat Hardened Images/nodejs24

Red Hat · Package

16 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
nodejs: nodejs: Denial of Service via HTTP/2 Alt-Svc heap buffer overflowCVE-2026-123828	Red Hat Enterprise Linux 10/nodejs24 Red Hat Enterprise Linux 10/nodejs26	Red Hat	Medium	No fix reported	Not recorded
nodejs: Node.js: Information disclosure via improper permission checks in recursive file watchingCVE-2026-123829	Red Hat Hardened Images/nodejs20 Red Hat Hardened Images/nodejs22	Red Hat	Low	No fix reported	Not recorded
nodejs: Node.js: Denial of service via abrupt disconnection during zlib compressionCVE-2026-123862	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	Medium	No fix reported	Not recorded
nodejs: Node.js: Denial of Service via improper HTTP/2 session teardownCVE-2026-123863	Red Hat Enterprise Linux 10/nodejs24 Red Hat Enterprise Linux 10/nodejs26	Red Hat	High	No fix reported	Not recorded
nodejs: nodejs: Information disclosure via HTTPS parser re-entrancyCVE-2026-123864	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	High	No fix reported	Not recorded
nodejs: Node.js: Denial of service via HTTP/2 session resource leak during shutdownCVE-2026-123865	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	High	No fix reported	Not recorded
nodejs: Node.js: Information disclosure via use-after-free during HTTP/2 stream teardownCVE-2026-123866	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	High	No fix reported	Not recorded
nodejs: Node.js: Mutual TLS authorization bypass via incomplete SNI context configurationCVE-2026-123867	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	Medium	No fix reported	Not recorded
nodejs: nodejs: Denial of service via HTTP/2 memory exhaustionCVE-2026-123868	Red Hat Enterprise Linux 10/nodejs24 Red Hat Enterprise Linux 10/nodejs26	Red Hat	Medium	No fix reported	Not recorded
nodejs: Node.js: Information disclosure via invalid proxy configuration error messagesCVE-2026-123871	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	Medium	No fix reported	Not recorded
nodejs: nodejs: Certificate validation bypass via TLS session cache reuseCVE-2026-123877	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	Medium	No fix reported	Not recorded
nodejs: Node.js: Client certificate authentication bypass via TLS renegotiationCVE-2026-123872	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	High	No fix reported	Not recorded
nodejs: nodejs: Denial of Service via HTTP/2 use-after-freeCVE-2026-123874	Red Hat Enterprise Linux 10/nodejs24 Red Hat Enterprise Linux 10/nodejs26	Red Hat	High	No fix reported	Not recorded
nodejs: nodejs: Denial of Service via cancelled HTTP/2 file downloadsCVE-2026-123875	Red Hat Enterprise Linux 10/nodejs22 Red Hat Enterprise Linux 10/nodejs24	Red Hat	Medium	No fix reported	Not recorded
nodejs: nodejs: Denial of service via premature socket closure during TLS handshakeCVE-2026-126051	Red Hat Enterprise Linux 10/nodejs24 Red Hat Enterprise Linux 10/nodejs26	Red Hat	High	No fix reported	Not recorded
nodejs: nodejs: dns.resolve truncates hostnames containing a NUL characterCVE-2026-105482	Red Hat Enterprise Linux 10/nodejs26 Red Hat Enterprise Linux 8/nodejs:22/nodejs	Red Hat	High	No fix reported	Not recorded