TI-2026-11166 CVE-2026-13149 · GHSA-3jxr-9vmj-r5cp
Uncontrolled resource consumption in juliangruber brace-expansion
Priority MEDIUM 40
brace-expansion through 5.0.6 is vulnerable to denial of service.
RHSA-2026:52990
Red Hat Hardened Images RPMs Security Update
Released 2026-08-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images nodejs26-1:26.7.0-1.5.1.hum1@aarch64, nodejs26-1:26.7.0-1.5.1.hum1@src, nodejs26-1:26.7.0-1.5.1.hum1@x86_64 +16
Fixes 5 records
TI-2026-41800 CVE-2026-58045 · GHSA-4j79-vxj3-vjvm
Uncontrolled resource consumption in NodeJS node
Priority LOW 27
A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash.
TI-2026-41797 CVE-2026-58042 · GHSA-pgf6-87r4-94vm
Uncontrolled resource consumption in NodeJS node
Priority LOW 27
A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records.
TI-2026-41796 CVE-2026-58041 · GHSA-qgrj-5wc5-7xvc
Time-of-check time-of-use race condition in NodeJS node
Priority LOW 24
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore() to continue executing a cached prepared statement after it has been reset and rebound with new parameters.
TI-2026-41799 CVE-2026-58044 · GHSA-6hff-9f4h-85xm
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based…
Priority LOW 17
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers while piping the original body to a reused…