Red Hat Security Advisory

RHSA-2025:1613

nodejs:22 security update

Released 2025-02-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) nodejs-1:22.13.1-1.module+el9.5.0+22763+17233acb.aarch64::nodejs:22, nodejs-1:22.13.1-1.module+el9.5.0+22763+17233acb.ppc64le::nodejs:22, nodejs-1:22.13.1-1.module+el9.5.0+22763+17233acb.s390x::nodejs:22 +28

TI-2025-16096 CVE-2025-22150 · GHSA-c76h-2ccp-4975

HIGH 65

Undici is an HTTP/1.1 client.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00763 Published 2025-01-21 Partial fix · 5.28.5, 6.21.1 +1 CWE-330

TI-2025-16879 CVE-2025-23083 · GHSA-wv7p-rjf3-9fr5

LOW 36

With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created.

CVSS 3.0HIGH 7.7 Local No auth No interaction EPSS 0.00422 Published 2025-01-22 Partial fix · 20.18.2, 22.13.1 +1 CWE-284

TI-2025-16881 CVE-2025-23085 · GHSA-qv9x-c8c9-rpr8

LOW 33

A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01377 Published 2025-02-07 Partial fix · 18.20.6, 20.18.2 +2 CWE-401