This security advisory from Red Hat addresses CVE-2026-2950, a vulnerability categorized under CWE-915, affecting the Red Hat Hardened Images RPMs, particularly nodejs20 packages for aarch64 and x86_64 architectures. The update includes multiple nodejs20 RPMs such as nodejs20, nodejs20-bin, nodejs20-devel, nodejs20-libs, and related components. The advisory does not specify the technical details of the vulnerability beyond the CWE classification or the exact impact. No CVSS score is provided. The update is intended as a bug fix and enhancement to improve security posture.

The vulnerability affects Red Hat Hardened Images RPMs involving nodejs20 packages. The medium severity rating indicates a moderate security impact, but no known exploits are reported. The lack of detailed impact information limits precise assessment. The vulnerability could potentially affect applications relying on these nodejs20 components within Red Hat Hardened Images.

Red Hat has released updated RPM packages for nodejs20 and related components as part of this advisory. Users of Red Hat Hardened Images should apply these updates promptly to address the vulnerability. Since this is an official Red Hat security advisory with updated packages available, applying the vendor-provided updates is the recommended remediation. Patch status is confirmed by the advisory. No additional mitigation steps are specified.