BELL-CVE-2026-123872

See a problem?
Please try reporting it to the source first.
Source
https://docs.bell-sw.com/security/cves/BELL-CVE-2026-123872/
Import Source
https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-123872.json
JSON Data
https://api.osv.dev/v1/vulns/BELL-CVE-2026-123872
Upstream
  • CVE-2026-123872
Published
2026-11-13T02:44:41Z
Modified
2026-11-13T07:15:06Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details
References

Affected packages

Alpaquita:stream
nodejs22

Package

Name
nodejs22
Purl
pkg:apk/alpaquita/nodejs22?arch=source&distro=stream

Affected ranges

Type
ECOSYSTEM
Events
Introduced
22.23.2-r0
Fixed
22.23.5-r0

Database specific

source 
"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-123872.json"
nodejs24

Package

Name
nodejs24
Purl
pkg:apk/alpaquita/nodejs24?arch=source&distro=stream

Affected ranges

Type
ECOSYSTEM
Events
Introduced
24.18.1-r3
Fixed
24.22.3-r0

Database specific

source 
"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-123872.json"
nodejs26

Package

Name
nodejs26
Purl
pkg:apk/alpaquita/nodejs26?arch=source&distro=stream

Affected ranges

Type
ECOSYSTEM
Events
Introduced
26.7.0-r0
Fixed
26.13.1-r0

Database specific

source 
"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-123872.json"
BellSoft Hardened Containers:stream
nodejs22

Package

Name
nodejs22
Purl
pkg:apk/bellsoft-hardened-containers/nodejs22?arch=source&distro=stream

Affected ranges

Type
ECOSYSTEM
Events
Introduced
22.23.2-r0
Fixed
22.23.5-r0

Database specific

source 
"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-123872.json"
nodejs24

Package

Name
nodejs24
Purl
pkg:apk/bellsoft-hardened-containers/nodejs24?arch=source&distro=stream

Affected ranges

Type
ECOSYSTEM
Events
Introduced
24.18.1-r3
Fixed
24.22.3-r0

Database specific

source 
"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-123872.json"
nodejs26

Package

Name
nodejs26
Purl
pkg:apk/bellsoft-hardened-containers/nodejs26?arch=source&distro=stream

Affected ranges

Type
ECOSYSTEM
Events
Introduced
26.7.0-r0
Fixed
26.13.1-r0

Database specific

source 
"https://github.com/bell-sw/osv-database/blob/master/BELL-CVE/BELL-CVE-2026-123872.json"