{ "document": { "aggregate_severity": { "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-48937: http2: tear down the session when nghttp2 internally queues a\n GOAWAY for a low-level protocol error. nghttp2 calls\n nghttp2_session_terminate_session() itself and returns success from\n nghttp2_session_mem_recv() without any callback, so the Http2Session stayed\n live on a dead socket, holding its streams, buffers and handle -- repeatable\n by an unauthenticated peer for memory/handle exhaustion. OnFrameSent() now\n flags a GOAWAY we did not initiate and SendPendingData() raises\n NGHTTP2_ERR_PROTO to JavaScript after it is written (backport of\n nodejs/node@a8a0d128; Node 14 has no graceful_close_initiated_ flag, so that\n term of the guard is covered by the new goaway_initiated_ flag and by\n is_closing())", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1786955687", "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1786955687" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_nodejs/el10/advisories/2026/clsa-2026_1786955687.json" } ], "tracking": { "current_release_date": "2026-08-17T08:35:22Z", "generator": { "date": "2026-08-17T08:35:22Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1786955687", "initial_release_date": "2026-08-17T08:35:22Z", "revision_history": [ { "date": "2026-08-17T08:35:22Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "alt-nodejs14-nodejs: Fix of CVE-2026-48937" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 10", "product": { "name": "Community Enterprise Operating System 10", "product_id": "CentOS-10", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Cloud Linux Software, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-26.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-26.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-26.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-26.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-26.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.26.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.26.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.26.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.26.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-25.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-25.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.25.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.25.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.25.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-25.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-25.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-25.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-25.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-24.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-24.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-24.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-24.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-24.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.24.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.24.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.24.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.24.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.23.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.23.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.23.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.23.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-23.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-23.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-23.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-23.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-23.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-23.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-23.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-23.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-22.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-22.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-22.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-22.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.22.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.22.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.22.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.22.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-22.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-22.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-22.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-22.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-21.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-21.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-21.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-21.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-21.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.21.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.21.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.21.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.21.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-20.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-20.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-20.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-20.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-20.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-20.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-20.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-20.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.20.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.20.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.20.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.20.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-19.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-19.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-19.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.19.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.19.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.19.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-19.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-19.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-19.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-19.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-devel-0:14.21.3-16.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-16.el10.x86_64", "product_id": "alt-nodejs14-nodejs-devel-0:14.21.3-16.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-devel@14.21.3-16.el10?arch=x86_64&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.16.el10.x86_64", "product": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.16.el10.x86_64", "product_id": "alt-nodejs14-npm-1:6.14.18-14.21.3.16.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-npm@6.14.18-14.21.3.16.el10?arch=x86_64&epoch=1&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-0:14.21.3-16.el10.x86_64", "product": { "name": "alt-nodejs14-nodejs-0:14.21.3-16.el10.x86_64", "product_id": "alt-nodejs14-nodejs-0:14.21.3-16.el10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs@14.21.3-16.el10?arch=x86_64&os_name=centos&os_version=10" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-26.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-26.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-26.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-26.el10?arch=noarch&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-25.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-25.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-25.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-25.el10?arch=noarch&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-24.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-24.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-24.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-24.el10?arch=noarch&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-23.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-23.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-23.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-23.el10?arch=noarch&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-22.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-22.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-22.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-22.el10?arch=noarch&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-21.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-21.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-21.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-21.el10?arch=noarch&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-20.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-20.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-20.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-20.el10?arch=noarch&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-19.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-19.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-19.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-19.el10?arch=noarch&os_name=centos&os_version=10" } } }, { "category": "product_version", "name": "alt-nodejs14-nodejs-docs-0:14.21.3-16.el10.noarch", "product": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-16.el10.noarch", "product_id": "alt-nodejs14-nodejs-docs-0:14.21.3-16.el10.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-nodejs14-nodejs-docs@14.21.3-16.el10?arch=noarch&os_name=centos&os_version=10" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-26.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-26.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-26.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-26.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-26.el10.noarch", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.26.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.26.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.26.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-25.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.25.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-25.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-25.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-25.el10.noarch", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-25.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-25.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-25.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-24.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-24.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-24.el10.noarch", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-24.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-24.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.24.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.24.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.24.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.23.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.23.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.23.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-23.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-23.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-23.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-23.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-23.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-23.el10.noarch", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-23.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-23.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-23.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-22.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-22.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-22.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.22.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.22.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.22.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-22.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-22.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-22.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-22.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-22.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-22.el10.noarch", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-21.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-21.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-21.el10.noarch", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-21.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-21.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.21.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.21.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.21.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-20.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-20.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-20.el10.noarch", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-20.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-20.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-20.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-20.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-20.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-20.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.20.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.20.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.20.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-19.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-19.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-19.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-19.el10.noarch", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.19.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-19.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-19.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-19.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-devel-0:14.21.3-16.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-16.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-devel-0:14.21.3-16.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-npm-1:6.14.18-14.21.3.16.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.16.el10.x86_64" }, "product_reference": "alt-nodejs14-npm-1:6.14.18-14.21.3.16.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-0:14.21.3-16.el10.x86_64 as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-16.el10.x86_64" }, "product_reference": "alt-nodejs14-nodejs-0:14.21.3-16.el10.x86_64", "relates_to_product_reference": "CentOS-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-nodejs14-nodejs-docs-0:14.21.3-16.el10.noarch as a component of Community Enterprise Operating System 10", "product_id": "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-16.el10.noarch" }, "product_reference": "alt-nodejs14-nodejs-docs-0:14.21.3-16.el10.noarch", "relates_to_product_reference": "CentOS-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-48937", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "description", "text": "A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This vulnerability affects two supported release lines: **Node.js 22** and **Node.js 24**.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-26.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-26.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-26.el10.noarch", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.26.el10.x86_64" ], "known_affected": [ "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-16.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-19.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-20.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-21.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-22.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-23.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-24.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-25.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-16.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-19.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-20.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-21.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-22.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-23.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-24.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-25.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-16.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-19.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-20.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-21.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-22.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-23.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-24.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-25.el10.noarch", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.16.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.19.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.20.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.21.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.22.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.23.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.24.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.25.el10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-nodejs/cve/CVE-2026-48937" }, { "category": "external", "summary": "https://hackerone.com/reports/3658225", "url": "https://hackerone.com/reports/3658225" }, { "category": "external", "summary": "https://nodejs.org/en/blog/vulnerability/june-2026-security-releases", "url": "https://nodejs.org/en/blog/vulnerability/june-2026-security-releases" } ], "release_date": "2026-06-18T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-17T08:34:50.140703Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1786955687", "product_ids": [ "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-26.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-26.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-26.el10.noarch", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.26.el10.x86_64" ], "url": "https://cve.tuxcare.com/els-alt-nodejs/releases/CLSA-2026:1786955687" }, { "category": "none_available", "date": "2026-06-18T19:16:00Z", "details": "Affected", "product_ids": [ "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-16.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-19.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-20.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-21.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-22.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-23.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-24.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-0:14.21.3-25.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-16.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-19.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-20.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-21.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-22.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-23.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-24.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-devel-0:14.21.3-25.el10.x86_64", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-16.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-19.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-20.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-21.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-22.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-23.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-24.el10.noarch", "CentOS-10:alt-nodejs14-nodejs-docs-0:14.21.3-25.el10.noarch", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.16.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.19.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.20.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.21.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.22.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.23.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.24.el10.x86_64", "CentOS-10:alt-nodejs14-npm-1:6.14.18-14.21.3.25.el10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ] } ] }