This advisory covers six security vulnerabilities in the Node.js 20 module for Red Hat Enterprise Linux 9, including CVE-2025-55130 and related CVEs. The issues include filesystem permissions bypass (CWE-281), denial of service (CWE-770), and uninitialized memory exposure (CWE-248), among others. Red Hat has released an update to fix these vulnerabilities, which affect multiple architectures and extended support versions of RHEL 9. The advisory does not provide CVSS scores but rates the update as important. The vendor advisory provides detailed instructions for applying the update.

The vulnerabilities could allow unauthorized bypass of filesystem permissions, cause denial of service conditions, or expose uninitialized memory, potentially leading to information disclosure or service disruption. The severity is rated as high by the source data, indicating significant risk if unpatched. There are no known exploits in the wild at this time.

Red Hat has released an official security update for the Node.js 20 module in Red Hat Enterprise Linux 9 that addresses these vulnerabilities. Users should apply the update as described in the Red Hat advisory (RHSA-2026:2783) available at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patch.