Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
RHSA-2026:61377
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2026:61377
Import Source
https://security.access.redhat.com/data/osv/RHSA-2026:61377.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2026:61377
Upstream
CVE-2026-56846
CVE-2026-56848
CVE-2026-58043
Published
2026-09-01T10:28:23Z
Modified
2026-09-02T10:21:59Z
Severity
7.5 (High)
CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS Calculator
Summary
Red Hat Security Advisory: nodejs24 security, bug fix, and enhancement update
Details
References
https://access.redhat.com/errata/RHSA-2026:61377
https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=2509171
https://bugzilla.redhat.com/show_bug.cgi?id=2510856
https://issues.redhat.com/browse/RHEL-220543
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61377.json
https://access.redhat.com/security/cve/CVE-2026-56846
https://www.cve.org/CVERecord?id=CVE-2026-56846
https://nvd.nist.gov/vuln/detail/CVE-2026-56846
https://nodejs.org/en/blog/vulnerability/july-2026-security-releases
https://access.redhat.com/security/cve/CVE-2026-56848
https://bugzilla.redhat.com/show_bug.cgi?id=2511089
https://www.cve.org/CVERecord?id=CVE-2026-56848
https://nvd.nist.gov/vuln/detail/CVE-2026-56848
https://access.redhat.com/security/cve/CVE-2026-58043
https://www.cve.org/CVERecord?id=CVE-2026-58043
https://nvd.nist.gov/vuln/detail/CVE-2026-58043
Affected packages
Red Hat:enterprise_linux:10.2
nodejs24
Package
Name
nodejs24
Purl
pkg:rpm/redhat/nodejs24
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:24.19.0-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
nodejs24-debuginfo
Package
Name
nodejs24-debuginfo
Purl
pkg:rpm/redhat/nodejs24-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:24.19.0-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
nodejs24-debugsource
Package
Name
nodejs24-debugsource
Purl
pkg:rpm/redhat/nodejs24-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:24.19.0-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
nodejs24-devel
Package
Name
nodejs24-devel
Purl
pkg:rpm/redhat/nodejs24-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:24.19.0-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
nodejs24-docs
Package
Name
nodejs24-docs
Purl
pkg:rpm/redhat/nodejs24-docs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:24.19.0-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
nodejs24-full-i18n
Package
Name
nodejs24-full-i18n
Purl
pkg:rpm/redhat/nodejs24-full-i18n
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:24.19.0-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
nodejs24-libs
Package
Name
nodejs24-libs
Purl
pkg:rpm/redhat/nodejs24-libs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:24.19.0-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
nodejs24-libs-debuginfo
Package
Name
nodejs24-libs-debuginfo
Purl
pkg:rpm/redhat/nodejs24-libs-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:24.19.0-1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
nodejs24-npm
Package
Name
nodejs24-npm
Purl
pkg:rpm/redhat/nodejs24-npm
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:11.17.0-1.24.19.0.1.el10_2
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:61377.json"
RHSA-2026:61377 - OSV