This Red Hat security advisory (RHSA-2026:22380) covers a bug fix and enhancement update for Red Hat Hardened Images RPMs, specifically nodejs26 and associated packages. It addresses multiple vulnerabilities including CVE-2026-45149 and others. The advisory lists updated RPM versions such as nodejs26-26.3.0-1.2.hum1 and related components for aarch64 and x86_64 architectures. The update is intended to fix security issues classified under CWEs 940, 1286, 295, and 770. No detailed CVSS scores or explicit affected version ranges are provided. The vendor advisory directs users to apply the update from https://images.redhat.com/. There are no known exploits in the wild at the time of publication.

The vulnerabilities addressed are considered high severity by Red Hat. The issues affect Red Hat Hardened Images RPMs, including nodejs26 packages, potentially impacting system security if left unpatched. The exact impact details are not specified, but the presence of multiple CWEs suggests risks related to improper input validation, cryptographic issues, and resource management. No known active exploitation has been reported.

Red Hat has released updated RPM packages as part of this advisory. Users should apply the provided updates from Red Hat Hardened Images repositories as per the instructions at https://images.redhat.com/. Since this is an official Red Hat security advisory with updated packages, applying these updates constitutes the official fix. There is no indication that additional mitigation steps are required beyond applying the update.