Red Hat issued a security advisory for Red Hat Hardened Images RPMs that includes updates to nodejs24 packages and related components. The advisory references CVE-2026-45149, a medium severity vulnerability classified under CWE-770 (Allocation of Resources Without Limits or Throttling). The CVSS vector indicates a network attack vector with low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, but high impact on availability. The advisory does not explicitly state a remediation level or patch availability. The affected products include Red Hat Hardened Images with nodejs24 packages on aarch64 and x86_64 architectures. No known exploits have been reported in the wild. The vendor advisory directs users to apply the update containing the listed RPM versions but does not provide explicit patch instructions or confirm the fix status.

The vulnerability (CVE-2026-45149) can cause a high impact on availability due to resource exhaustion, potentially leading to denial of service conditions. There is no impact on confidentiality or integrity. The attack requires network access and user interaction but no privileges. No known exploits are reported in the wild, indicating limited active threat at this time.

The vendor advisory lists updated RPM packages for nodejs24 as part of a bug fix and enhancement update for Red Hat Hardened Images. Users should apply these updates as recommended by Red Hat to address the vulnerability. Since no explicit patch status or remediation level is stated, users should monitor the Red Hat advisory links for detailed update instructions and confirm that the updated RPM versions are installed. There is no indication that no action is required or that the issue is already mitigated without update.