Known vulnerabilities in nodejs22 (Red Hat package)

Vendor: Red Hat Inc.
Software: nodejs22 (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:nodejs22_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs22 (Red Hat package) nodejs22 (Red Hat package) is affected by 30 known vulnerabilities: 2 high, 21 medium, 7 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-42338		 CWE-79 Medium
No
No
 22.23.1-2.el10_0 31.08.2026 SB20260831109
SB20260831117
SB20260831118
and 7 more
#VU146374 - Server-Side Request Forgery (SSRF)
CVE-2026-69192		 CWE-918 Medium
No
No
 22.23.1-6.el10_2 31.08.2026 SB2026083145
SB2026083146
SB2026083185
and 2 more
#VU140707 - Resource exhaustion
CVE-2026-69152		 CWE-400 Medium
No
No
 22.23.1-6.el10_2 01.08.2026 SB2026080125
SB2026081044
SB2026083142
and 8 more
#VU140706 - Allocation of Resources Without Limits or Throttling
CVE-2026-14257		 CWE-770 Medium
No
No
 22.23.1-6.el10_2 01.08.2026 SB2026080124
SB2026083142
SB2026083146
and 7 more
#VU140038 - Resource exhaustion
CVE-2026-56846		 CWE-400 Medium
No
No
 22.23.2-1.el10_2 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 6 more
#VU140039 - Use After Free
CVE-2026-56848		 CWE-416 Medium
No
No
 22.23.2-1.el10_2 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 6 more
#VU140040 - Improper Access Control
CVE-2026-58043		 CWE-284 Low
No
No
 22.23.2-1.el10_2 29.07.2026 SB2026072975
SB2026083143
SB2026083144
and 6 more
#VU135820 - Inefficient Algorithmic Complexity
CVE-2026-13149		 CWE-407 Medium
No
No
 22.23.1-3.el10_0, 22.23.1-4.el10_2 29.06.2026 SB20260629111
SB2026072843
SB2026072877
and 16 more
#VU135768 - Allocation of Resources Without Limits or Throttling
CVE-2026-59873		 CWE-770 Medium
No
No
 22.23.1-3.el10_0, 22.23.1-4.el10_2 29.06.2026 SB2026062990
SB20260728122
SB2026072972
and 8 more
#VU135767 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-59874		 CWE-835 Medium
No
No
 22.23.1-3.el10_0, 22.23.1-4.el10_2 29.06.2026 SB2026062989
SB20260728122
SB2026072972
and 6 more
#VU135014 - Integer overflow
CVE-2026-48933		 CWE-190 Medium
No
No
 22.23.1-2.el10_0 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 6 more
#VU135015 - Improper input validation
CVE-2026-48618		 CWE-20 High
No
No
 22.23.1-2.el10_0 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 6 more
#VU135016 - Information Exposure Through Log Files
CVE-2026-48615		 CWE-532 Low
No
No
 22.23.1-2.el10_0 22.06.2026 SB2026062248
SB20260728134
SB20260831117
and 6 more
#VU134753 - Allocation of Resources Without Limits or Throttling
CVE-2026-12151		 CWE-770 Medium
No
No
 22.23.1-2.el10_0 17.06.2026 SB2026061760
SB20260720393
SB2026080430
and 10 more
#VU127581 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-1525		 CWE-444 Medium
No
No
 22.22.2-1.el10_1, 22.22.2-2.el10_0 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU127579 - Improper Validation of Specified Quantity in Input
CVE-2026-1528		 CWE-1284 Medium
No
No
 22.22.2-1.el10_1, 22.22.2-2.el10_0 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 13 more
#VU127578 - Improper Validation of Specified Quantity in Input
CVE-2026-2229		 CWE-1284 Medium
No
No
 22.22.2-1.el10_1, 22.22.2-2.el10_0 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU127576 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-1526		 CWE-409 Medium
No
No
 22.22.2-1.el10_1, 22.22.2-2.el10_0 24.04.2026 SB20260424137
SB20260424148
SB20260424149
and 12 more
#VU127046 - Improper input validation
CVE-2026-27135		 CWE-20 Medium
No
No
 22.22.2-1.el10_1, 22.22.2-2.el10_0 23.04.2026 SB2026042395
SB20260423101
SB20260423102
and 33 more
#VU124542 - Error Handling
CVE-2026-21710		 CWE-388 Medium
No
No
 22.22.2-1.el10_1, 22.22.2-2.el10_0 25.03.2026 SB20260325154
SB2026032902
SB2026041056
and 30 more


Showing elements 1 - 20 out of 30