High ELSA-2026-52841 1 CVE

Important: nodejs-nodemon security update (Oracle Linux 10)

Published Aug 10, 2026 · Updated Aug 10, 2026

Ecosystem: Oracle Linux

Summary

[3.1.14-3]
- Fix CVE-2026-69152 - brace-expansion

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 10	nodejs-nodemon	0:3.1.14-3.el10_2

Vulnerabilities 1

High 7.5

CVE-2026-69152

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing a…

juliangruber brace-expansion langfuse-3-worker katib-suggestion-hyperopt Ubuntu Azure Linux Wolfi npm

Aug 3, 2026