Linux
nodejs security updates
Patch Radar has 518 security fixes for nodejs, closing 234 CVEs, 2 of which are being exploited. The newest security fix is ELSA-2026-500516 (1:22.23.2-3.0.2.el10_2), released November 7, 2026.
2 exploited CVEs
Latest version
n/a
Release date not known
Security fixes
518
On record in Patch Radar
CVEs
234
Closed by those fixes
Exploited
2
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| Patch now | ELSA-2026-500516 | ol 10 | 1:22.23.2-3.0.2.el10_2 | 1 | 1 | Nov 7, 2026 |
| Patch now | ELSA-2026-500517 | ol 9 | 1:22.23.2-2.0.1.module+el9.8.0+91084+6a4a26be | 1 | 1 | Nov 7, 2026 |
| High | ELSA-2026-92378 | ol 9 | 1:24.21.0-1.0.1.module+el9.8.0+91091+c060d8b4 | 12 | Nov 7, 2026 | |
| High | ELSA-2026-76750 | ol 9 | 1:22.23.2-2.module+el9.8.0+91062+a7d6b802 | 2 | Nov 7, 2026 | |
| Patch now | ELSA-2026-500520 | ol 8 | 1:24.21.0-1.0.1.module+el8.10.0+91086+e75af208 | 1 | 1 | Nov 7, 2026 |
| High | ELSA-2026-92376 | ol 8 | 1:24.21.0-1.0.1.module+el8.10.0+91090+8c7726c5 | 12 | Nov 7, 2026 | |
| High | ELSA-2026-75870 | ol 8 | 1:22.23.2-2.module+el8.10.0+91061+02523cc0 | 2 | Nov 7, 2026 | |
| Patch now | ALSA-2026:92378 | almalinux 9 | 1:24.22.1-3.module_el9.8.0+333+788f3075 | 13 | 1 | Nov 7, 2026 |
| Patch now | ALSA-2026:92376 | almalinux 8 | 1:24.22.1-1.module_el8.10.0+4331+0683c9c1 | 13 | 1 | Nov 7, 2026 |
| Patch now | RLSA-2026:92378 | rocky 9 | 1:24.22.1-3.module+el9.8.0+40401+e24b8c95 | 13 | 1 | Nov 7, 2026 |
| High | RLSA-2026:76750 | rocky 9 | 1:22.23.2-2.module+el9.8.0+40374+17512296 | 2 | Nov 7, 2026 | |
| Patch now | RHSA-2026:92378 | RHEL 9 | 1:24.22.1-3.module+el9.8.0+25216+afa2a4a4 | 13 | 1 | Oct 30, 2026 |
| Patch now | RHSA-2026:92376 | RHEL 8 | 1:24.22.1-1.module+el8.10.0+25218+d9e131cb | 13 | 1 | Oct 30, 2026 |
| High | ALSA-2026:76750 | almalinux 9 | 1:22.23.2-2.module_el9.8.0+322+f4aa738c | 2 | Oct 6, 2026 | |
| High | ELSA-2026-75864 | ol 10 | 1:22.23.2-3.0.1.el10_2 | 2 | Oct 6, 2026 | |
| High | ALSA-2026:75864 | almalinux 10 | 1:22.23.2-3.el10_2 | 2 | Oct 5, 2026 | |
| High | ALSA-2026:75870 | almalinux 8 | 1:22.23.2-2.module_el8.10.0+4296+737cb4d7 | 2 | Oct 5, 2026 | |
| Urgent | ELSA-2026-74085 | ol 8 | 1:24.21.0-1.module+el8.10.0+91054+4b1a799c | 3 | Oct 2, 2026 | |
| Urgent | RHSA-2026:74085 | RHEL 8 | 1:24.21.0-1.module+el8.10.0+24927+ed3d907a | 3 | Oct 1, 2026 | |
| High | RHSA-2026:75870 | RHEL 8 | 1:22.23.2-2.module+el8.10.0+24957+74108fbf | 2 | Oct 1, 2026 | |
| Urgent | RHSA-2026:73838 | RHEL 9 | 1:24.21.0-1.module+el9.8.0+24924+cd677006 | 3 | Sep 30, 2026 | |
| High | RHSA-2026:76750 | RHEL 9 | 1:22.23.2-2.module+el9.8.0+24958+80b2ac6e | 2 | Sep 30, 2026 | |
| Urgent | ALSA-2026:73838 | almalinux 9 | 1:24.21.0-1.module_el9.8.0+321+1555b6a2 | 3 | Sep 30, 2026 | |
| Urgent | ALSA-2026:74085 | almalinux 8 | 1:24.21.0-1.module_el8.10.0+4292+21afb960 | 3 | Sep 30, 2026 | |
| Urgent | ELSA-2026-73838 | ol 9 | 1:24.21.0-1.module+el9.8.0+91053+65d3e6aa | 3 | Sep 30, 2026 | |
| High | RHSA-2026:61386 | RHEL 9 | 1:24.19.0-1.module+el9.8.0+24708+e71d2e1d | 11 | Sep 13, 2026 | |
| High | RHSA-2026:62583 | RHEL 8 | 1:24.19.0-1.module+el8.10.0+24711+b610b202 | 11 | Sep 13, 2026 | |
| Routine | DEBIAN-CVE-2026-48932 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Sep 7, 2026 | |
| High | RLSA-2026:62219 | rocky 8 | 1:22.23.2-1.module+el8.10.0+40306+15f89705 | 3 | Sep 2, 2026 | |
| High | ALSA-2026:62583 | almalinux 8 | 1:24.19.0-1.module_el8.10.0+4268+8e07aa5a | 11 | Sep 2, 2026 | |
| High | ELSA-2026-62219-0 | ol 8 | 1:22.23.2-1.module+el8.10.0+91012+ae4911b6 | 3 | Sep 2, 2026 | |
| High | ELSA-2026-61376-0 | ol 10 | 1:22.23.2-1.0.1.el10_2 | 3 | Sep 1, 2026 | |
| High | ELSA-2026-61383-0 | ol 9 | 1:22.23.2-1.module+el9.8.0+91010+e0f4f255 | 3 | Sep 1, 2026 | |
| High | ALSA-2026:61386 | almalinux 9 | 1:24.19.0-1.module_el9.8.0+301+084fac05 | 11 | Aug 31, 2026 | |
| High | ALSA-2026:61376 | almalinux 10 | 1:22.23.2-1.el10_2 | 10 | Aug 31, 2026 | |
| High | RHSA-2026:55603 | RHEL 9 | 1:24.18.0-6.module+el9.8.0+24638+75f46aee | 6 | Aug 28, 2026 | |
| High | RHSA-2026:54371 | RHEL 8 | 1:24.18.0-3.module+el8.10.0+24639+56878497 | 6 | Aug 28, 2026 | |
| High | RHSA-2026:54530 | RHEL 8 | 1:22.23.1-3.module+el8.10.0+24640+6eba5e6e | 5 | Aug 28, 2026 | |
| High | RLSA-2026:55603 | rocky 9 | 1:24.18.0-6.module+el9.8.0+40281+14cc6568 | 6 | Aug 25, 2026 | |
| High | RLSA-2026:54530 | rocky 8 | 1:22.23.1-3.module+el8.10.0+40278+50b003a3 | 5 | Aug 25, 2026 | |
| High | RLSA-2026:54371 | rocky 8 | 1:24.18.0-3.module+el8.10.0+40277+b1b3f89e | 1 | Aug 25, 2026 | |
| High | ELSA-2026-55603 | ol 9 | 1:24.18.0-6.module+el9.8.0+90993+075b4fd6 | 6 | Aug 18, 2026 | |
| High | ELSA-2026-55601 | ol 9 | 1:22.23.1-3.module+el9.8.0+90991+73acc950 | 5 | Aug 18, 2026 | |
| High | ALSA-2026:55603 | almalinux 9 | 1:24.18.0-6.module_el9.8.0+292+f4eaf8b2 | 6 | Aug 17, 2026 | |
| High | ALSA-2026:55541 | almalinux 10 | 1:22.23.1-6.el10_2 | 3 | Aug 17, 2026 | |
| High | ELSA-2026-55541 | ol 10 | 1:22.23.1-6.0.1.el10_2 | 3 | Aug 17, 2026 | |
| High | DEBIAN-CVE-2026-56848 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| High | DEBIAN-CVE-2026-56848 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Aug 15, 2026 | |
| High | DEBIAN-CVE-2026-56848 | Debian 12.15 (bookworm) | 18.20.4+dfsg-1~deb12u3 | 1 | Aug 15, 2026 | |
| High | DEBIAN-CVE-2026-56846 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| High | DEBIAN-CVE-2026-56846 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Aug 15, 2026 | |
| High | DEBIAN-CVE-2026-56846 | Debian 12.15 (bookworm) | 18.20.4+dfsg-1~deb12u3 | 1 | Aug 15, 2026 | |
| High | DEBIAN-CVE-2026-58043 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| High | DEBIAN-CVE-2026-58043 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58042 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58042 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58042 | Debian 12.15 (bookworm) | 18.20.4+dfsg-1~deb12u3 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58041 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58040 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58040 | Debian 12.15 (bookworm) | 18.20.4+dfsg-1~deb12u3 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58044 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58045 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-56847 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-56847 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58039 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-58039 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-56850 | Debian 14 | 24.19.0+dfsg+~cs24.13.3-1 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-56850 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Aug 15, 2026 | |
| Routine | DEBIAN-CVE-2026-56850 | Debian 12.15 (bookworm) | 18.20.4+dfsg-1~deb12u3 | 1 | Aug 15, 2026 | |
| High | ELSA-2026-54371 | ol 8 | 1:24.18.0-3.module+el8.10.0+90988+ddbb43dc | 6 | Aug 14, 2026 | |
| High | ALSA-2026:54530 | almalinux 8 | 1:22.23.1-3.module_el8.10.0+4251+b427b8a5 | 5 | Aug 13, 2026 | |
| High | ALSA-2026:54371 | almalinux 8 | 1:24.18.0-3.module_el8.10.0+4250+09238ed4 | 6 | Aug 12, 2026 | |
| High | RHSA-2026:47058 | RHEL 9 | 1:22.23.1-2.module+el9.8.0+24538+3f176d52 | 3 | Aug 5, 2026 | |
| High | RLSA-2026:47058 | rocky 9 | 1:22.23.1-2.module+el9.8.0+40263+faa47049 | 3 | Aug 3, 2026 | |
| High | RHSA-2026:47060 | RHEL 8 | 1:24.18.0-2.module+el8.10.0+24562+090c6525 | 3 | Jul 31, 2026 | |
| High | ELSA-2026-47057 | ol 9 | 1:24.18.0-3.module+el9.8.0+90974+83075495 | 3 | Jul 31, 2026 | |
| High | ALSA-2026:48033 | almalinux 10 | 1:22.23.1-4.el10_2 | 3 | Jul 29, 2026 | |
| High | ELSA-2026-47059 | ol 8 | 1:22.23.1-2.module+el8.10.0+90976+97994de0 | 3 | Jul 29, 2026 | |
| High | ELSA-2026-48033 | ol 10 | 1:22.23.1-4.el10_2 | 3 | Jul 29, 2026 | |
| High | ALSA-2026:47058 | almalinux 9 | 1:22.23.1-2.module_el9.8.0+285+5c3b0251 | 3 | Jul 28, 2026 | |
| High | ALSA-2026:47060 | almalinux 8 | 1:24.18.0-2.module_el8.10.0+4237+cde4efc3 | 3 | Jul 28, 2026 | |
| Urgent | ALSA-2026:41947 | almalinux 8 | 1:22.23.1-1.module_el8.10.0+4231+1bf2f855 | 16 | Jul 20, 2026 | |
| Urgent | ELSA-2026-39868 | ol 8 | 1:24.18.0-1.module+el8.10.0+90961+a86f8457 | 15 | Jul 20, 2026 | |
| Urgent | RHSA-2026:39868 | RHEL 8 | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 | 18 | Jul 18, 2026 | |
| Urgent | RHSA-2026:41947 | RHEL 8 | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 | 16 | Jul 18, 2026 | |
| Urgent | RLSA-2026:39868 | rocky 8 | 1:24.18.0-1.module+el8.10.0+40252+a58646bc | 15 | Jul 16, 2026 | |
| Urgent | ELSA-2026-35842 | ol 10 | 1:22.23.1-2.el10_2 | 13 | Jul 16, 2026 | |
| Urgent | ALSA-2026:39868 | almalinux 8 | 1:24.18.0-1.module_el8.10.0+4228+2938bc94 | 18 | Jul 15, 2026 | |
| Urgent | ELSA-2026-35892 | ol 9 | 1:22.23.1-1.module+el9.8.0+90947+d3e8e647 | 13 | Jul 8, 2026 | |
| Urgent | RHSA-2026:35891 | RHEL 9 | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 | 18 | Jul 7, 2026 | |
| Urgent | RHSA-2026:35892 | RHEL 9 | 1:22.23.1-1.module+el9.8.0+24457+996af7aa | 16 | Jul 7, 2026 | |
| Urgent | ELSA-2026-35891 | ol 9 | 1:24.18.0-1.module+el9.8.0+90946+13dc792a | 15 | Jul 7, 2026 | |
| Urgent | ALSA-2026:35891 | almalinux 9 | 1:24.18.0-1.module_el9.8.0+277+61fc613e | 18 | Jul 6, 2026 | |
| Urgent | ALSA-2026:35842 | almalinux 10 | 1:22.23.1-2.el10_2 | 16 | Jul 6, 2026 | |
| Urgent | ALSA-2026:35892 | almalinux 9 | 1:22.23.1-1.module_el9.8.0+276+8b329b47 | 16 | Jul 6, 2026 | |
| Urgent | DEBIAN-CVE-2026-48930 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Jun 25, 2026 | |
| Urgent | DEBIAN-CVE-2026-48930 | Debian 12.15 (bookworm) | 18.20.4+dfsg-1~deb12u3 | 1 | Jun 25, 2026 | |
| Urgent | DEBIAN-CVE-2026-48930 | Debian 14 | 24.17.0+dfsg+~cs24.13.2-1 | 1 | Jun 25, 2026 | |
| High | DEBIAN-CVE-2026-48933 | Debian 13.5 (trixie) | 20.19.2+dfsg-1+deb13u3 | 1 | Jun 25, 2026 | |
| High | DEBIAN-CVE-2026-48933 | Debian 12.15 (bookworm) | 18.20.4+dfsg-1~deb12u3 | 1 | Jun 25, 2026 |
Showing the newest 100 of 518 fixes.
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.