Red Hat Security Advisory

RHSA-2025:1582

nodejs:18 security update

Released 2025-02-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) nodejs-1:18.20.6-1.module+el8.10.0+22776+24cd6c55.aarch64::nodejs:18, nodejs-1:18.20.6-1.module+el8.10.0+22776+24cd6c55.ppc64le::nodejs:18, nodejs-1:18.20.6-1.module+el8.10.0+22776+24cd6c55.s390x::nodejs:18 +20

TI-2025-16096 CVE-2025-22150 · GHSA-c76h-2ccp-4975

HIGH 65

Undici is an HTTP/1.1 client.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00763 Published 2025-01-21 Partial fix · 5.28.5, 6.21.1 +1 CWE-330

TI-2025-16881 CVE-2025-23085 · GHSA-qv9x-c8c9-rpr8

LOW 33

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01377 Published 2025-02-07 Partial fix · 18.20.6, 20.18.2 +2 CWE-401