Threats Tagged 'cve-2026-12151'

This Red Hat security advisory addresses multiple vulnerabilities in Node.js 24, including cross-site scripting, denial of service, information disclosure, authentication bypass, and trust-policy bypass issues. The update rebases Node.js 24 to the latest upstream release, resolving 15 distinct CVEs affecting components such as undici, ip-address, and Node.js core. The vulnerabilities impact network communication, TLS handling, proxy credential exposure, and WebCrypto functionality. Red Hat rates the security impact as Important and provides updated packages for Red Hat Enterprise Linux 10. No CVSS scores are provided in the advisory.

This Red Hat security advisory addresses multiple vulnerabilities in Node.js 22, including issues in the ip-address and undici libraries, as well as core Node.js components. The vulnerabilities include cross-site scripting, denial of service, information disclosure, authentication bypass, and trust-policy bypass among others. The advisory provides a security, bug fix, and enhancement update rebasing Node.js 22 to the latest release for Red Hat Enterprise Linux 10. The update is rated as important by Red Hat Product Security.

This Red Hat security advisory addresses multiple vulnerabilities in Node.js 24 and related components such as undici and ip-address. The issues include cross-site scripting, denial of service, information disclosure, authentication bypass, and trust-policy bypass among others. The update rebases Node.js 24 to the latest release to incorporate these fixes. The advisory rates the security impact as Important (high severity).

This Red Hat security advisory addresses multiple vulnerabilities in Node.js 22, including cross-site scripting, denial of service, information disclosure, authentication bypass, and trust-policy bypass issues. The update rebases Node.js 22 to the latest release, fixing 13 distinct CVEs affecting components such as ip-address, undici, and core Node.js modules. The vulnerabilities impact TLS handling, HTTP/2, WebCrypto, proxy credential exposure, and cookie parsing. The advisory is rated as Important by Red Hat Product Security.