Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Hardened Images 1 hummingbird:1 | nodejs24 | 0:24.14.1-4.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nodejs24-bin | 0:24.14.1-4.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nodejs24-devel | 0:24.14.1-4.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nodejs24-docs | 0:24.14.1-4.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nodejs24-full-i18n | 0:24.14.1-4.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nodejs24-libs | 0:24.14.1-4.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nodejs24-npm | 0:11.11.0-1.24.14.1.4.1.hum1 |
| Red Hat · Hardened Images 1 hummingbird:1 | nodejs24-npm-bin | 0:24.14.1-4.1.hum1 |
Vulnerabilities 4
-
High 7.1CVE-2025-55130 Public exploit
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions …
-
High 7.1
A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when usin…
-
Medium 6.5
A memory leak in Node.js’s OpenSSL integration occurs when converting `X.509` certificate fields to UTF-8 without freei…
-
Low 2.8
A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` e…
References
-
article
https://images.redhat.com/
-
report
https://access.redhat.com/security/cve/CVE-2025-59464
-
article
https://access.redhat.com/security/updates/classification/
-
report
https://access.redhat.com/security/cve/CVE-2025-55132
-
report
https://access.redhat.com/security/cve/CVE-2025-55131
-
report
https://access.redhat.com/security/cve/CVE-2025-55130
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7657.json
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2431352
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-55130
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-55130
-
article
https://nodejs.org/en/blog/vulnerability/december-2025-security-releases
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2431350
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-55131
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-55131
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2431338
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-55132
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-55132
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2431344
-
advisory
https://www.cve.org/CVERecord?id=CVE-2025-59464
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-59464