SUSE-SU-2026:4248-1
Vulnerability from csaf_suse - Published: 2026-09-17 15:59 - Updated: 2026-09-18 09:16Summary
Security update for nodejs18
Severity
Important
Notes
Title of the patch: Security update for nodejs18
Description of the patch: This update for nodejs18 fixes the following issues:
- CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request
(bsc#1236258).
- CVE-2025-23166: improper error handling in async cryptographic operations crashes process (bsc#1243218).
- CVE-2025-23167: llhttp: improper HTTP header block termination in llhttp (bsc#1243220).
- CVE-2025-55131: timeout-based race conditions allow for allocations that contain leftover data from previous
operations and lead to exposure of in-process secrets (bsc#1256570).
- CVE-2025-59465: malformed HTTP/2 HEADERS frame with invalid HPACK data can cause a crash due to an unhandled error
(bsc#1256573).
- CVE-2025-59466: uncatchable 'Maximum call stack size exceeded' error when `async_hooks.createHook()` is enabled can
lead to crash (bsc#1256574).
- CVE-2025-62408: c-ares 1.32.3-1.34.5 use after free() (bsc#1254738).
- CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response
delivery (bsc#1268479).
- CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).
- CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header
(bsc#1268481).
- CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).
- CVE-2026-15157: No validation of the type property of a duck-typed blob-like request body before using it as the
Content-Type header on the HTTP/1.1 dispatcher (bsc#1272958).
- CVE-2026-16728: undici: downstream response desynchronization via retry interceptor (bsc#1273593).
- CVE-2026-16729: undici: undici's setCookie function does not fully sanitize cookie attributes (bsc#1273591).
- CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths
and can cause a denial of service (bsc#1256576).
- CVE-2026-21710: uncaught TypeError exception can cause a denial of service (bsc#1260455).
- CVE-2026-21713: timing side-channel in HMAC verification via memcmp can lead to potential MAC forgery (bsc#1260463).
- CVE-2026-21714: WINDOW_UPDATE frames on stream 0 can lead to memory leak (bsc#1260480).
- CVE-2026-21717: crafted request can lead to hash collisions trivially predictable (bsc#1260494).
- CVE-2026-22036: undici: unbounded decompression chain in HTTP responses via Content-Encoding may lead to resource
exhaustion (bsc#1256848).
- CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).
- CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to
resolver and verifier hostname normalization mismatch (bsc#1268593).
- CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).
- CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname
matching (bsc#1268605).
- CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver
bindings (bsc#1268606).
- CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).
- CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).
- CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to
unauthorized connections (bsc#1268608).
- CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).
- CVE-2026-48937: servers keep accepting data even after sending a `GOAWAY` frame (bsc#1268555).
- CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits (bsc#1272941).
- CVE-2026-56848: HTTP/2 re-entrant send can cause heap-use-after-free (bsc#1272942).
- CVE-2026-56850: HTTPS Agent can reuse mTLS identities across PFX certificates (bsc#1272944).
- CVE-2026-58040: HTTPS Agent session reuse can skip hostname verification (bsc#1272945).
- CVE-2026-58042: dns.resolveAny() can abort on DNS responses with many A records (bsc#1272947).
- CVE-2026-58043: Permission Model path matching can over-grant filesystem access (bsc#1272943).
- CVE-2026-58044: HTTP parser header truncation can enable request smuggling (bsc#1272951).
- CVE-2026-58045: node:zlib sync APIs can crash on spoofed TypedArray length (bsc#1272948).
Changes for nodejs18:
- upgraded embedded undici to 6.28.0.
- upgraded embedded nghttp2 to 1.69.0.
Patchnames: SUSE-2026-4248,SUSE-SLE-SERVER-12-SP5-LTSS-2026-4248,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4248
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6.8 (Medium)
Affected products
Recommended
56 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
7.5 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
low
5.9 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
4.8 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
5.6 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
7.4 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
5.9 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
low
7.5 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
4 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
7.5 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
4.1 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
6.3 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
5.9 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
important
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
6.2 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
low
5.9 (Medium)
Affected products
Recommended
56 products, the same list as for
CVE-2025-22150
Threats
Impact
moderate
References
163 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for nodejs18",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for nodejs18 fixes the following issues:\n\n- CVE-2025-22150: undici: insufficiently random values used when defining the boundary for a multipart/form-data request\n (bsc#1236258).\n- CVE-2025-23166: improper error handling in async cryptographic operations crashes process (bsc#1243218).\n- CVE-2025-23167: llhttp: improper HTTP header block termination in llhttp (bsc#1243220).\n- CVE-2025-55131: timeout-based race conditions allow for allocations that contain leftover data from previous\n operations and lead to exposure of in-process secrets (bsc#1256570).\n- CVE-2025-59465: malformed HTTP/2 HEADERS frame with invalid HPACK data can cause a crash due to an unhandled error\n (bsc#1256573).\n- CVE-2025-59466: uncatchable \u0027Maximum call stack size exceeded\u0027 error when `async_hooks.createHook()` is enabled can\n lead to crash (bsc#1256574).\n- CVE-2025-62408: c-ares 1.32.3-1.34.5 use after free() (bsc#1254738).\n- CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response\n delivery (bsc#1268479).\n- CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).\n- CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header\n (bsc#1268481).\n- CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).\n- CVE-2026-15157: No validation of the type property of a duck-typed blob-like request body before using it as the\n Content-Type header on the HTTP/1.1 dispatcher (bsc#1272958).\n- CVE-2026-16728: undici: downstream response desynchronization via retry interceptor (bsc#1273593).\n- CVE-2026-16729: undici: undici\u0027s setCookie function does not fully sanitize cookie attributes (bsc#1273591).\n- CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths\n and can cause a denial of service (bsc#1256576).\n- CVE-2026-21710: uncaught TypeError exception can cause a denial of service (bsc#1260455).\n- CVE-2026-21713: timing side-channel in HMAC verification via memcmp can lead to potential MAC forgery (bsc#1260463).\n- CVE-2026-21714: WINDOW_UPDATE frames on stream 0 can lead to memory leak (bsc#1260480).\n- CVE-2026-21717: crafted request can lead to hash collisions trivially predictable (bsc#1260494).\n- CVE-2026-22036: undici: unbounded decompression chain in HTTP responses via Content-Encoding may lead to resource\n exhaustion (bsc#1256848).\n- CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).\n- CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to\n resolver and verifier hostname normalization mismatch (bsc#1268593).\n- CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).\n- CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname\n matching (bsc#1268605).\n- CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver\n bindings (bsc#1268606).\n- CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).\n- CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).\n- CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to\n unauthorized connections (bsc#1268608).\n- CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).\n- CVE-2026-48937: servers keep accepting data even after sending a `GOAWAY` frame (bsc#1268555).\n- CVE-2026-56846: HTTP/2 retained headers can bypass maxSessionMemory limits (bsc#1272941).\n- CVE-2026-56848: HTTP/2 re-entrant send can cause heap-use-after-free (bsc#1272942).\n- CVE-2026-56850: HTTPS Agent can reuse mTLS identities across PFX certificates (bsc#1272944).\n- CVE-2026-58040: HTTPS Agent session reuse can skip hostname verification (bsc#1272945).\n- CVE-2026-58042: dns.resolveAny() can abort on DNS responses with many A records (bsc#1272947).\n- CVE-2026-58043: Permission Model path matching can over-grant filesystem access (bsc#1272943).\n- CVE-2026-58044: HTTP parser header truncation can enable request smuggling (bsc#1272951).\n- CVE-2026-58045: node:zlib sync APIs can crash on spoofed TypedArray length (bsc#1272948).\n\nChanges for nodejs18:\n \n- upgraded embedded undici to 6.28.0.\n- upgraded embedded nghttp2 to 1.69.0.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-4248,SUSE-SLE-SERVER-12-SP5-LTSS-2026-4248,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4248",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_4248-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:4248-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264248-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:4248-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20264248-1/"
},
{
"category": "self",
"summary": "SUSE Bug 1236258",
"url": "https://bugzilla.suse.com/1236258"
},
{
"category": "self",
"summary": "SUSE Bug 1243218",
"url": "https://bugzilla.suse.com/1243218"
},
{
"category": "self",
"summary": "SUSE Bug 1243220",
"url": "https://bugzilla.suse.com/1243220"
},
{
"category": "self",
"summary": "SUSE Bug 1254738",
"url": "https://bugzilla.suse.com/1254738"
},
{
"category": "self",
"summary": "SUSE Bug 1256570",
"url": "https://bugzilla.suse.com/1256570"
},
{
"category": "self",
"summary": "SUSE Bug 1256573",
"url": "https://bugzilla.suse.com/1256573"
},
{
"category": "self",
"summary": "SUSE Bug 1256574",
"url": "https://bugzilla.suse.com/1256574"
},
{
"category": "self",
"summary": "SUSE Bug 1256576",
"url": "https://bugzilla.suse.com/1256576"
},
{
"category": "self",
"summary": "SUSE Bug 1256848",
"url": "https://bugzilla.suse.com/1256848"
},
{
"category": "self",
"summary": "SUSE Bug 1259853",
"url": "https://bugzilla.suse.com/1259853"
},
{
"category": "self",
"summary": "SUSE Bug 1260455",
"url": "https://bugzilla.suse.com/1260455"
},
{
"category": "self",
"summary": "SUSE Bug 1260463",
"url": "https://bugzilla.suse.com/1260463"
},
{
"category": "self",
"summary": "SUSE Bug 1260480",
"url": "https://bugzilla.suse.com/1260480"
},
{
"category": "self",
"summary": "SUSE Bug 1260494",
"url": "https://bugzilla.suse.com/1260494"
},
{
"category": "self",
"summary": "SUSE Bug 1268477",
"url": "https://bugzilla.suse.com/1268477"
},
{
"category": "self",
"summary": "SUSE Bug 1268479",
"url": "https://bugzilla.suse.com/1268479"
},
{
"category": "self",
"summary": "SUSE Bug 1268481",
"url": "https://bugzilla.suse.com/1268481"
},
{
"category": "self",
"summary": "SUSE Bug 1268482",
"url": "https://bugzilla.suse.com/1268482"
},
{
"category": "self",
"summary": "SUSE Bug 1268555",
"url": "https://bugzilla.suse.com/1268555"
},
{
"category": "self",
"summary": "SUSE Bug 1268592",
"url": "https://bugzilla.suse.com/1268592"
},
{
"category": "self",
"summary": "SUSE Bug 1268593",
"url": "https://bugzilla.suse.com/1268593"
},
{
"category": "self",
"summary": "SUSE Bug 1268605",
"url": "https://bugzilla.suse.com/1268605"
},
{
"category": "self",
"summary": "SUSE Bug 1268606",
"url": "https://bugzilla.suse.com/1268606"
},
{
"category": "self",
"summary": "SUSE Bug 1268608",
"url": "https://bugzilla.suse.com/1268608"
},
{
"category": "self",
"summary": "SUSE Bug 1268609",
"url": "https://bugzilla.suse.com/1268609"
},
{
"category": "self",
"summary": "SUSE Bug 1268611",
"url": "https://bugzilla.suse.com/1268611"
},
{
"category": "self",
"summary": "SUSE Bug 1268618",
"url": "https://bugzilla.suse.com/1268618"
},
{
"category": "self",
"summary": "SUSE Bug 1269825",
"url": "https://bugzilla.suse.com/1269825"
},
{
"category": "self",
"summary": "SUSE Bug 1272941",
"url": "https://bugzilla.suse.com/1272941"
},
{
"category": "self",
"summary": "SUSE Bug 1272942",
"url": "https://bugzilla.suse.com/1272942"
},
{
"category": "self",
"summary": "SUSE Bug 1272943",
"url": "https://bugzilla.suse.com/1272943"
},
{
"category": "self",
"summary": "SUSE Bug 1272944",
"url": "https://bugzilla.suse.com/1272944"
},
{
"category": "self",
"summary": "SUSE Bug 1272945",
"url": "https://bugzilla.suse.com/1272945"
},
{
"category": "self",
"summary": "SUSE Bug 1272947",
"url": "https://bugzilla.suse.com/1272947"
},
{
"category": "self",
"summary": "SUSE Bug 1272948",
"url": "https://bugzilla.suse.com/1272948"
},
{
"category": "self",
"summary": "SUSE Bug 1272951",
"url": "https://bugzilla.suse.com/1272951"
},
{
"category": "self",
"summary": "SUSE Bug 1272958",
"url": "https://bugzilla.suse.com/1272958"
},
{
"category": "self",
"summary": "SUSE Bug 1273591",
"url": "https://bugzilla.suse.com/1273591"
},
{
"category": "self",
"summary": "SUSE Bug 1273593",
"url": "https://bugzilla.suse.com/1273593"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22150 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23166 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23166/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23167 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23167/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-55131 page",
"url": "https://www.suse.com/security/cve/CVE-2025-55131/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-59465 page",
"url": "https://www.suse.com/security/cve/CVE-2025-59465/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-59466 page",
"url": "https://www.suse.com/security/cve/CVE-2025-59466/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-62408 page",
"url": "https://www.suse.com/security/cve/CVE-2025-62408/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-11525 page",
"url": "https://www.suse.com/security/cve/CVE-2026-11525/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-12151 page",
"url": "https://www.suse.com/security/cve/CVE-2026-12151/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-15157 page",
"url": "https://www.suse.com/security/cve/CVE-2026-15157/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16728 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16728/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-16729 page",
"url": "https://www.suse.com/security/cve/CVE-2026-16729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21637 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21637/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21710 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21710/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21713 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21713/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21714 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-21717 page",
"url": "https://www.suse.com/security/cve/CVE-2026-21717/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-22036 page",
"url": "https://www.suse.com/security/cve/CVE-2026-22036/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27135 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27135/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48618 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48618/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48619 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48928 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48930 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48930/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48931 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48931/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48933 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48935 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48935/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-48937 page",
"url": "https://www.suse.com/security/cve/CVE-2026-48937/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56846 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56846/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56848 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56848/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-56850 page",
"url": "https://www.suse.com/security/cve/CVE-2026-56850/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-58040 page",
"url": "https://www.suse.com/security/cve/CVE-2026-58040/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-58042 page",
"url": "https://www.suse.com/security/cve/CVE-2026-58042/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-58043 page",
"url": "https://www.suse.com/security/cve/CVE-2026-58043/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-58044 page",
"url": "https://www.suse.com/security/cve/CVE-2026-58044/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-58045 page",
"url": "https://www.suse.com/security/cve/CVE-2026-58045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-6733 page",
"url": "https://www.suse.com/security/cve/CVE-2026-6733/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-9679 page",
"url": "https://www.suse.com/security/cve/CVE-2026-9679/"
}
],
"title": "Security update for nodejs18",
"tracking": {
"current_release_date": "2026-09-18T09:16:52Z",
"generator": {
"date": "2026-09-17T15:59:50Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:4248-1",
"initial_release_date": "2026-09-17T15:59:50Z",
"revision_history": [
{
"date": "2026-09-17T15:59:50Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-18T09:16:52Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "corepack18-0:18.20.8-8.44.1.aarch64",
"product": {
"name": "corepack18-0:18.20.8-8.44.1.aarch64",
"product_id": "corepack18-0:18.20.8-8.44.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/corepack18@18.20.8-8.44.1?arch=aarch64\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-0:18.20.8-8.44.1.aarch64",
"product": {
"name": "nodejs18-0:18.20.8-8.44.1.aarch64",
"product_id": "nodejs18-0:18.20.8-8.44.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18@18.20.8-8.44.1?arch=aarch64\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"product": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"product_id": "nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18-devel@18.20.8-8.44.1?arch=aarch64\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "npm18-0:18.20.8-8.44.1.aarch64",
"product": {
"name": "npm18-0:18.20.8-8.44.1.aarch64",
"product_id": "npm18-0:18.20.8-8.44.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/npm18@18.20.8-8.44.1?arch=aarch64\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack18-0:18.20.8-8.44.1.i586",
"product": {
"name": "corepack18-0:18.20.8-8.44.1.i586",
"product_id": "corepack18-0:18.20.8-8.44.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/corepack18@18.20.8-8.44.1?arch=i586\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-0:18.20.8-8.44.1.i586",
"product": {
"name": "nodejs18-0:18.20.8-8.44.1.i586",
"product_id": "nodejs18-0:18.20.8-8.44.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18@18.20.8-8.44.1?arch=i586\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-devel-0:18.20.8-8.44.1.i586",
"product": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.i586",
"product_id": "nodejs18-devel-0:18.20.8-8.44.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18-devel@18.20.8-8.44.1?arch=i586\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "npm18-0:18.20.8-8.44.1.i586",
"product": {
"name": "npm18-0:18.20.8-8.44.1.i586",
"product_id": "npm18-0:18.20.8-8.44.1.i586",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/npm18@18.20.8-8.44.1?arch=i586\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "nodejs18-docs-0:18.20.8-8.44.1.noarch",
"product": {
"name": "nodejs18-docs-0:18.20.8-8.44.1.noarch",
"product_id": "nodejs18-docs-0:18.20.8-8.44.1.noarch",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18-docs@18.20.8-8.44.1?arch=noarch\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack18-0:18.20.8-8.44.1.ppc64le",
"product": {
"name": "corepack18-0:18.20.8-8.44.1.ppc64le",
"product_id": "corepack18-0:18.20.8-8.44.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/corepack18@18.20.8-8.44.1?arch=ppc64le\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-0:18.20.8-8.44.1.ppc64le",
"product": {
"name": "nodejs18-0:18.20.8-8.44.1.ppc64le",
"product_id": "nodejs18-0:18.20.8-8.44.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18@18.20.8-8.44.1?arch=ppc64le\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"product": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"product_id": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18-devel@18.20.8-8.44.1?arch=ppc64le\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "npm18-0:18.20.8-8.44.1.ppc64le",
"product": {
"name": "npm18-0:18.20.8-8.44.1.ppc64le",
"product_id": "npm18-0:18.20.8-8.44.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/npm18@18.20.8-8.44.1?arch=ppc64le\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack18-0:18.20.8-8.44.1.s390x",
"product": {
"name": "corepack18-0:18.20.8-8.44.1.s390x",
"product_id": "corepack18-0:18.20.8-8.44.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/corepack18@18.20.8-8.44.1?arch=s390x\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-0:18.20.8-8.44.1.s390x",
"product": {
"name": "nodejs18-0:18.20.8-8.44.1.s390x",
"product_id": "nodejs18-0:18.20.8-8.44.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18@18.20.8-8.44.1?arch=s390x\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-devel-0:18.20.8-8.44.1.s390x",
"product": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.s390x",
"product_id": "nodejs18-devel-0:18.20.8-8.44.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18-devel@18.20.8-8.44.1?arch=s390x\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "npm18-0:18.20.8-8.44.1.s390x",
"product": {
"name": "npm18-0:18.20.8-8.44.1.s390x",
"product_id": "npm18-0:18.20.8-8.44.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/npm18@18.20.8-8.44.1?arch=s390x\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "corepack18-0:18.20.8-8.44.1.x86_64",
"product": {
"name": "corepack18-0:18.20.8-8.44.1.x86_64",
"product_id": "corepack18-0:18.20.8-8.44.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/corepack18@18.20.8-8.44.1?arch=x86_64\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-0:18.20.8-8.44.1.x86_64",
"product": {
"name": "nodejs18-0:18.20.8-8.44.1.x86_64",
"product_id": "nodejs18-0:18.20.8-8.44.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18@18.20.8-8.44.1?arch=x86_64\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"product": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"product_id": "nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/nodejs18-devel@18.20.8-8.44.1?arch=x86_64\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
},
{
"category": "product_version",
"name": "npm18-0:18.20.8-8.44.1.x86_64",
"product": {
"name": "npm18-0:18.20.8-8.44.1.x86_64",
"product_id": "npm18-0:18.20.8-8.44.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:nodejs:node.js:18.20.8:*:*:*:-:*:*:*",
"purl": "pkg:rpm/suse/npm18@18.20.8-8.44.1?arch=x86_64\u0026upstream=nodejs18-0:18.20.8-8.44.1.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP5",
"product_id": "SUSE Linux Enterprise Server 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 12 SP5",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-hpc:12:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-docs-0:18.20.8-8.44.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch"
},
"product_reference": "nodejs18-docs-0:18.20.8-8.44.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "npm18-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x"
},
"product_reference": "npm18-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-docs-0:18.20.8-8.44.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch"
},
"product_reference": "nodejs18-docs-0:18.20.8-8.44.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "npm18-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x"
},
"product_reference": "npm18-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-docs-0:18.20.8-8.44.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch"
},
"product_reference": "nodejs18-docs-0:18.20.8-8.44.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "npm18-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x"
},
"product_reference": "npm18-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-docs-0:18.20.8-8.44.1.noarch as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch"
},
"product_reference": "nodejs18-docs-0:18.20.8-8.44.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le"
},
"product_reference": "npm18-0:18.20.8-8.44.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x"
},
"product_reference": "npm18-0:18.20.8-8.44.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-devel-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "nodejs18-docs-0:18.20.8-8.44.1.noarch as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch"
},
"product_reference": "nodejs18-docs-0:18.20.8-8.44.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "npm18-0:18.20.8-8.44.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
"product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
},
"product_reference": "npm18-0:18.20.8-8.44.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22150"
}
],
"notes": [
{
"category": "general",
"text": "Undici is an HTTP/1.1 client. Starting in version 4.5.0 and prior to versions 5.28.5, 6.21.1, and 7.2.3, undici uses `Math.random()` to choose the boundary for a multipart/form-data request. It is known that the output of `Math.random()` can be predicted if several of its generated values are known. If there is a mechanism in an app that sends multipart requests to an attacker-controlled website, they can use this to leak the necessary values. Therefore, an attacker can tamper with the requests going to the backend APIs if certain conditions are met. This is fixed in versions 5.28.5, 6.21.1, and 7.2.3. As a workaround, do not issue multipart requests to attacker controlled servers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22150",
"url": "https://www.suse.com/security/cve/CVE-2025-22150"
},
{
"category": "external",
"summary": "SUSE Bug 1236257 for CVE-2025-22150",
"url": "https://bugzilla.suse.com/1236257"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2025-22150"
},
{
"cve": "CVE-2025-23166",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23166"
}
],
"notes": [
{
"category": "general",
"text": "The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23166",
"url": "https://www.suse.com/security/cve/CVE-2025-23166"
},
{
"category": "external",
"summary": "SUSE Bug 1243218 for CVE-2025-23166",
"url": "https://bugzilla.suse.com/1243218"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2025-23166"
},
{
"cve": "CVE-2025-23167",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23167"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js 20\u0027s HTTP parser allows improper termination of HTTP/1 headers using `\\r\\n\\rX` instead of the required `\\r\\n\\r\\n`.\nThis inconsistency enables request smuggling, allowing attackers to bypass proxy-based access controls and submit unauthorized requests.\n\nThe issue was resolved by upgrading `llhttp` to version 9, which enforces correct header termination.\n\nImpact:\n* This vulnerability affects only Node.js 20.x users prior to the `llhttp` v9 upgrade.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23167",
"url": "https://www.suse.com/security/cve/CVE-2025-23167"
},
{
"category": "external",
"summary": "SUSE Bug 1243220 for CVE-2025-23167",
"url": "https://bugzilla.suse.com/1243220"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2025-23167"
},
{
"cve": "CVE-2025-55131",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-55131"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js\u0027s buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the `vm` module with the timeout option. Under specific timing conditions, buffers allocated with `Buffer.alloc` and other `TypedArray` instances like `Uint8Array` may contain leftover data from previous operations, allowing in-process secrets like tokens or passwords to leak or causing data corruption. While exploitation typically requires precise timing or in-process code execution, it can become remotely exploitable when untrusted input influences workload and timeouts, leading to potential confidentiality and integrity impact.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-55131",
"url": "https://www.suse.com/security/cve/CVE-2025-55131"
},
{
"category": "external",
"summary": "SUSE Bug 1256570 for CVE-2025-55131",
"url": "https://bugzilla.suse.com/1256570"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2025-55131"
},
{
"cve": "CVE-2025-59465",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-59465"
}
],
"notes": [
{
"category": "general",
"text": "A malformed `HTTP/2 HEADERS` frame with oversized, invalid `HPACK` data can cause Node.js to crash by triggering an unhandled `TLSSocket` error `ECONNRESET`. Instead of safely closing the connection, the process crashes, enabling a remote denial of service. This primarily affects applications that do not attach explicit error handlers to secure sockets, for example:\n```\nserver.on(\u0027secureConnection\u0027, socket =\u003e {\n socket.on(\u0027error\u0027, err =\u003e {\n console.log(err)\n })\n})\n```",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-59465",
"url": "https://www.suse.com/security/cve/CVE-2025-59465"
},
{
"category": "external",
"summary": "SUSE Bug 1256573 for CVE-2025-59465",
"url": "https://bugzilla.suse.com/1256573"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2025-59465"
},
{
"cve": "CVE-2025-59466",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-59466"
}
],
"notes": [
{
"category": "general",
"text": "We have identified a bug in Node.js error handling where \"Maximum call stack size exceeded\" errors become uncatchable when `async_hooks.createHook()` is enabled. Instead of reaching `process.on(\u0027uncaughtException\u0027)`, the process terminates, making the crash unrecoverable. Applications that rely on `AsyncLocalStorage` (v22, v20) or `async_hooks.createHook()` (v24, v22, v20) become vulnerable to denial-of-service crashes triggered by deep recursion under specific conditions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-59466",
"url": "https://www.suse.com/security/cve/CVE-2025-59466"
},
{
"category": "external",
"summary": "SUSE Bug 1256574 for CVE-2025-59466",
"url": "https://bugzilla.suse.com/1256574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2025-59466"
},
{
"cve": "CVE-2025-62408",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-62408"
}
],
"notes": [
{
"category": "general",
"text": "c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts when using read_answer() and process_answer(), which can cause a Denial of Service. This issue is fixed in version 1.34.6.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-62408",
"url": "https://www.suse.com/security/cve/CVE-2025-62408"
},
{
"category": "external",
"summary": "SUSE Bug 1254738 for CVE-2025-62408",
"url": "https://bugzilla.suse.com/1254738"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2025-62408"
},
{
"cve": "CVE-2026-11525",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-11525"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nWhen undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently mapped to one of the three standard tokens. For example, SameSite=NoneOfYourBusiness is parsed as None (the most permissive setting), and SameSite=StrictLax is parsed as Lax (a downgrade from Strict).\n\nAffected applications are those that consume Set-Cookie headers from server responses (for example via undici\u0027s fetch or proxy code paths) and then forward or rely on the parsed sameSite attribute. A malicious or non-compliant server can coerce the consumer\u0027s view of a cookie\u0027s SameSite policy to a weaker value, silently degrading the SameSite enforcement the cookie is supposed to provide.\n\nThis was introduced in undici 5.15.0 when the cookies feature was added.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nAfter parsing a Set-Cookie header, validate that the resulting sameSite attribute is one of \u0027Strict\u0027, \u0027Lax\u0027, or \u0027None\u0027 (exact, case-insensitive) before forwarding or relying on it.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-11525",
"url": "https://www.suse.com/security/cve/CVE-2026-11525"
},
{
"category": "external",
"summary": "SUSE Bug 1268481 for CVE-2026-11525",
"url": "https://bugzilla.suse.com/1268481"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "low"
}
],
"title": "CVE-2026-11525"
},
{
"cve": "CVE-2026-12151",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-12151"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nThe undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service.\n\nAffected applications are those using the undici WebSocket client (new WebSocket(...)) or the WebSocketStream API that can be induced to connect to an attacker-controlled or compromised WebSocket endpoint.\n\nAll releases starting at undici 6.17.0 are affected.\n\nPatches: Upgrade to undici \u003e= 6.26.0, \u003e= 7.28.0, or \u003e= 8.5.0. Workarounds:\nNo workaround is available. The fix must be applied through an upgrade.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-12151",
"url": "https://www.suse.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "SUSE Bug 1268482 for CVE-2026-12151",
"url": "https://bugzilla.suse.com/1268482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-12151"
},
{
"cve": "CVE-2026-15157",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-15157"
}
],
"notes": [
{
"category": "general",
"text": "undici does not validate the type property of a duck-typed blob-like request body before using it as the Content-Type header on the HTTP/1.1 dispatcher. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, an application that passes a hand-rolled blob-like body (via request, stream, pipeline, or dispatch) whose type is derived from untrusted input allows an attacker to inject CRLF sequences and append arbitrary HTTP headers, potentially smuggling a second request past the upstream. Native Blob objects are safe because their constructor strips CRLF from the type, and fetch is unaffected because it validates headers, but ecosystem libraries that build duck-typed blob shapes from user input can reach the vulnerable path. This is the same defect class as CVE-2022-35948 and CVE-2026-1527, on a header sink that the earlier fixes did not cover. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-15157",
"url": "https://www.suse.com/security/cve/CVE-2026-15157"
},
{
"category": "external",
"summary": "SUSE Bug 1272958 for CVE-2026-15157",
"url": "https://bugzilla.suse.com/1272958"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-15157"
},
{
"cve": "CVE-2026-16728",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16728"
}
],
"notes": [
{
"category": "general",
"text": "undici\u0027s retry interceptor can deliver a response whose body length does not match the Content-Length header exposed to the application after a retry or resume of a partial response. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a malicious or faulty upstream can return a partial response with a mismatched framing header, close the socket early, and have the retry interceptor assemble a body of a different length while the original Content-Length stays attached. Applications that use the retry interceptor and forward upstream headers and bodies downstream, such as proxies or gateways, may then emit an invalid HTTP response with a stale Content-Length, leading to downstream response desynchronization, connection hangs, or response corruption. Exploitation requires the retry interceptor enabled, an upstream returning a mismatched partial response, and a downstream forwarder that does not remove or recalculate Content-Length. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16728",
"url": "https://www.suse.com/security/cve/CVE-2026-16728"
},
{
"category": "external",
"summary": "SUSE Bug 1273261 for CVE-2026-16728",
"url": "https://bugzilla.suse.com/1273261"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-16728"
},
{
"cve": "CVE-2026-16729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-16729"
}
],
"notes": [
{
"category": "general",
"text": "undici\u0027s setCookie function does not fully sanitize cookie attributes. In undici before 6.28.0, from 7.0.0 up to before 7.29.0, and from 8.0.0 up to before 8.9.0, a domain value is not checked for semicolons and entries in the unparsed array are not sanitized, so attacker-influenced input can inject additional cookie attributes. For example, a domain value containing a semicolon can append attributes such as SameSite, and an unparsed entry can inject attributes such as HttpOnly, without the caller setting them. Applications that pass user-controlled input to these fields, such as multi-tenant or reverse-proxy servers that scope session cookies to a tenant-supplied domain, can have SameSite CSRF protections bypassed, or the Secure, HttpOnly, and SameSite attributes forced, stripped, or overridden. The issue is fixed in undici 6.28.0, 7.29.0, and 8.9.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-16729",
"url": "https://www.suse.com/security/cve/CVE-2026-16729"
},
{
"category": "external",
"summary": "SUSE Bug 1273262 for CVE-2026-16729",
"url": "https://bugzilla.suse.com/1273262"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-16729"
},
{
"cve": "CVE-2026-21637",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21637"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS error handling allows remote attackers to crash or exhaust resources of a TLS server when `pskCallback` or `ALPNCallback` are in use. Synchronous exceptions thrown during these callbacks bypass standard TLS error handling paths (tlsClientError and error), causing either immediate process termination or silent file descriptor leaks that eventually lead to denial of service. Because these callbacks process attacker-controlled input during the TLS handshake, a remote client can repeatedly trigger the issue. This vulnerability affects TLS servers using PSK or ALPN callbacks across Node.js versions where these callbacks throw without being safely wrapped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21637",
"url": "https://www.suse.com/security/cve/CVE-2026-21637"
},
{
"category": "external",
"summary": "SUSE Bug 1256576 for CVE-2026-21637",
"url": "https://bugzilla.suse.com/1256576"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21637",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-21637"
},
{
"cve": "CVE-2026-21710",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21710"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP request handling causes an uncaught `TypeError` when a request is received with a header named `__proto__` and the application accesses `req.headersDistinct`.\r\n\r\nWhen this occurs, `dest[\"__proto__\"]` resolves to `Object.prototype` rather than `undefined`, causing `.push()` to be called on a non-array. This exception is thrown synchronously inside a property getter and cannot be intercepted by `error` event listeners, meaning it cannot be handled without wrapping every `req.headersDistinct` access in a `try/catch`.\r\n\r\n* This vulnerability affects all Node.js HTTP servers on **20.x, 22.x, 24.x, and v25.x**",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21710",
"url": "https://www.suse.com/security/cve/CVE-2026-21710"
},
{
"category": "external",
"summary": "SUSE Bug 1260455 for CVE-2026-21710",
"url": "https://bugzilla.suse.com/1260455"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21710",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2026-21710"
},
{
"cve": "CVE-2026-21713",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21713"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior could be exploited as a timing oracle to infer HMAC values.\r\n\r\nNode.js already provides timing-safe comparison primitives used elsewhere in the codebase, indicating this is an oversight rather than an intentional design decision.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21713",
"url": "https://www.suse.com/security/cve/CVE-2026-21713"
},
{
"category": "external",
"summary": "SUSE Bug 1260463 for CVE-2026-21713",
"url": "https://bugzilla.suse.com/1260463"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21713",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-21713"
},
{
"cve": "CVE-2026-21714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21714"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the maximum value of 2^31-1. The server correctly sends a GOAWAY frame, but the Http2Session object is never cleaned up.\r\n\r\nThis vulnerability affects HTTP2 users on Node.js 20, 22, 24 and 25.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21714",
"url": "https://www.suse.com/security/cve/CVE-2026-21714"
},
{
"category": "external",
"summary": "SUSE Bug 1260480 for CVE-2026-21714",
"url": "https://bugzilla.suse.com/1260480"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21714",
"url": "https://bugzilla.suse.com/1260482"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-21714"
},
{
"cve": "CVE-2026-21717",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-21717"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in V8\u0027s string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8\u0027s internal string table, an attacker can significantly degrade performance of the Node.js process.\r\n\r\nThe most common trigger is any endpoint that calls `JSON.parse()` on attacker-controlled input, as JSON parsing automatically internalizes short strings into the affected hash table.\r\n\r\nThis vulnerability affects **20.x, 22.x, 24.x, and 25.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-21717",
"url": "https://www.suse.com/security/cve/CVE-2026-21717"
},
{
"category": "external",
"summary": "SUSE Bug 1260482 for CVE-2026-21717",
"url": "https://bugzilla.suse.com/1260482"
},
{
"category": "external",
"summary": "SUSE Bug 1260494 for CVE-2026-21717",
"url": "https://bugzilla.suse.com/1260494"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-21717"
},
{
"cve": "CVE-2026-22036",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-22036"
}
],
"notes": [
{
"category": "general",
"text": "Undici is an HTTP/1.1 client for Node.js. Prior to 7.18.0 and 6.23.0, the number of links in the decompression chain is unbounded and the default maxHeaderSize allows a malicious server to insert thousands compression steps leading to high CPU usage and excessive memory allocation. This vulnerability is fixed in 7.18.0 and 6.23.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-22036",
"url": "https://www.suse.com/security/cve/CVE-2026-22036"
},
{
"category": "external",
"summary": "SUSE Bug 1256843 for CVE-2026-22036",
"url": "https://bugzilla.suse.com/1256843"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-22036"
},
{
"cve": "CVE-2026-27135",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27135"
}
],
"notes": [
{
"category": "general",
"text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27135",
"url": "https://www.suse.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "SUSE Bug 1259835 for CVE-2026-27135",
"url": "https://bugzilla.suse.com/1259835"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2026-27135"
},
{
"cve": "CVE-2026-48618",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48618"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat.\r\n\r\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48618",
"url": "https://www.suse.com/security/cve/CVE-2026-48618"
},
{
"category": "external",
"summary": "SUSE Bug 1268593 for CVE-2026-48618",
"url": "https://bugzilla.suse.com/1268593"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2026-48618"
},
{
"cve": "CVE-2026-48619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48619"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48619",
"url": "https://www.suse.com/security/cve/CVE-2026-48619"
},
{
"category": "external",
"summary": "SUSE Bug 1268618 for CVE-2026-48619",
"url": "https://bugzilla.suse.com/1268618"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-48619"
},
{
"cve": "CVE-2026-48928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48928"
}
],
"notes": [
{
"category": "general",
"text": "A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48928",
"url": "https://www.suse.com/security/cve/CVE-2026-48928"
},
{
"category": "external",
"summary": "SUSE Bug 1268605 for CVE-2026-48928",
"url": "https://bugzilla.suse.com/1268605"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-48928"
},
{
"cve": "CVE-2026-48930",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48930"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48930",
"url": "https://www.suse.com/security/cve/CVE-2026-48930"
},
{
"category": "external",
"summary": "SUSE Bug 1268606 for CVE-2026-48930",
"url": "https://bugzilla.suse.com/1268606"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-48930"
},
{
"cve": "CVE-2026-48931",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48931"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48931",
"url": "https://www.suse.com/security/cve/CVE-2026-48931"
},
{
"category": "external",
"summary": "SUSE Bug 1268611 for CVE-2026-48931",
"url": "https://bugzilla.suse.com/1268611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "low"
}
],
"title": "CVE-2026-48931"
},
{
"cve": "CVE-2026-48933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48933"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48933",
"url": "https://www.suse.com/security/cve/CVE-2026-48933"
},
{
"category": "external",
"summary": "SUSE Bug 1268592 for CVE-2026-48933",
"url": "https://bugzilla.suse.com/1268592"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2026-48933"
},
{
"cve": "CVE-2026-48934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48934"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48934",
"url": "https://www.suse.com/security/cve/CVE-2026-48934"
},
{
"category": "external",
"summary": "SUSE Bug 1268608 for CVE-2026-48934",
"url": "https://bugzilla.suse.com/1268608"
},
{
"category": "external",
"summary": "SUSE Bug 1272945 for CVE-2026-48934",
"url": "https://bugzilla.suse.com/1272945"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-48934"
},
{
"cve": "CVE-2026-48935",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48935"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. `--allow-fs-read`.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48935",
"url": "https://www.suse.com/security/cve/CVE-2026-48935"
},
{
"category": "external",
"summary": "SUSE Bug 1268609 for CVE-2026-48935",
"url": "https://bugzilla.suse.com/1268609"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-48935"
},
{
"cve": "CVE-2026-48937",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-48937"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This vulnerability affects two supported release lines: **Node.js 22** and **Node.js 24**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-48937",
"url": "https://www.suse.com/security/cve/CVE-2026-48937"
},
{
"category": "external",
"summary": "SUSE Bug 1268555 for CVE-2026-48937",
"url": "https://bugzilla.suse.com/1268555"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-48937"
},
{
"cve": "CVE-2026-56846",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56846"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion.\r\n\r\nThis vulnerability affects Node.js **24.x** and **22.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56846",
"url": "https://www.suse.com/security/cve/CVE-2026-56846"
},
{
"category": "external",
"summary": "SUSE Bug 1272941 for CVE-2026-56846",
"url": "https://bugzilla.suse.com/1272941"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2026-56846"
},
{
"cve": "CVE-2026-56848",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56848"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is executing, resulting in a heap-use-after-free.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56848",
"url": "https://www.suse.com/security/cve/CVE-2026-56848"
},
{
"category": "external",
"summary": "SUSE Bug 1272942 for CVE-2026-56848",
"url": "https://bugzilla.suse.com/1272942"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2026-56848"
},
{
"cve": "CVE-2026-56850",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-56850"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-56850",
"url": "https://www.suse.com/security/cve/CVE-2026-56850"
},
{
"category": "external",
"summary": "SUSE Bug 1272944 for CVE-2026-56850",
"url": "https://bugzilla.suse.com/1272944"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-56850"
},
{
"cve": "CVE-2026-58040",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-58040"
}
],
"notes": [
{
"category": "general",
"text": "An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934).\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-58040",
"url": "https://www.suse.com/security/cve/CVE-2026-58040"
},
{
"category": "external",
"summary": "SUSE Bug 1272945 for CVE-2026-58040",
"url": "https://bugzilla.suse.com/1272945"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-58040"
},
{
"cve": "CVE-2026-58042",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-58042"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records.\r\n\r\nRepeated triggering of this condition can lead to denial of service.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-58042",
"url": "https://www.suse.com/security/cve/CVE-2026-58042"
},
{
"category": "external",
"summary": "SUSE Bug 1272947 for CVE-2026-58042",
"url": "https://bugzilla.suse.com/1272947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-58042"
},
{
"cve": "CVE-2026-58043",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-58043"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.\r\n\r\nUnder `--permission`, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist.\r\n\r\nThis vulnerability affects Node.js **main**, **22.x**, **24.x**, and **26.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-58043",
"url": "https://www.suse.com/security/cve/CVE-2026-58043"
},
{
"category": "external",
"summary": "SUSE Bug 1272943 for CVE-2026-58043",
"url": "https://bugzilla.suse.com/1272943"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "important"
}
],
"title": "CVE-2026-58043"
},
{
"cve": "CVE-2026-58044",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-58044"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers while piping the original body to a reused backend connection.\r\n\r\nNode.js can omit headers beyond `maxHeadersCount` / `maxHeaderPairs` from `req.headers`, `req.rawHeaders`, and `req.headersDistinct`, while still using those omitted headers internally for HTTP message framing. In particular, `Content-Length` can be hidden from userland while the request body is still delivered.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-58044",
"url": "https://www.suse.com/security/cve/CVE-2026-58044"
},
{
"category": "external",
"summary": "SUSE Bug 1272951 for CVE-2026-58044",
"url": "https://bugzilla.suse.com/1272951"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-58044"
},
{
"cve": "CVE-2026-58045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-58045"
}
],
"notes": [
{
"category": "general",
"text": "A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected.\r\n\r\nRepeated exploitation of this condition can result in a denial of service.\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-58045",
"url": "https://www.suse.com/security/cve/CVE-2026-58045"
},
{
"category": "external",
"summary": "SUSE Bug 1272948 for CVE-2026-58045",
"url": "https://bugzilla.suse.com/1272948"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-58045"
},
{
"cve": "CVE-2026-6733",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-6733"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nUndici\u0027s HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response onto an idle socket after a request completes. When the client dispatches the next request on that socket, it associates the injected response with the new request, causing responses to be delivered to the wrong requests.\n\nThis requires an attacker-controlled or compromised upstream HTTP/1.1 server and keep-alive connection reuse.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nDisable keep-alive connection reuse by setting keepAliveTimeout: 0 on the Client or Pool.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-6733",
"url": "https://www.suse.com/security/cve/CVE-2026-6733"
},
{
"category": "external",
"summary": "SUSE Bug 1268479 for CVE-2026-6733",
"url": "https://bugzilla.suse.com/1268479"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "low"
}
],
"title": "CVE-2026-6733"
},
{
"cve": "CVE-2026-9679",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-9679"
}
],
"notes": [
{
"category": "general",
"text": "Impact:\nundici\u0027s cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 \u003cparagraph\u003e5.4 does not specify any decoding and browsers do not decode either.\n\nApplications that parse a Set-Cookie header and then forward the parsed value into a response header (proxies, middleware, SSR frameworks) become vulnerable to HTTP response header injection: an attacker-controlled upstream can inject arbitrary Set-Cookie, Location, or Cache-Control headers into the application\u0027s downstream response, enabling session fixation, open redirect, or cache poisoning.\n\nAffected applications are those that use undici\u0027s cookie parsing (parseSetCookie, parseCookie, getSetCookies) and forward the parsed cookie value into a response header.\n\nThis was introduced in undici 7.0.0 via PR #3789.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nIf upgrade is not immediately possible, do not forward values returned by parseSetCookie/parseCookie/getSetCookies directly into response headers; sanitize the value first to strip or reject CR, LF, NUL, ;, and = bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-9679",
"url": "https://www.suse.com/security/cve/CVE-2026-9679"
},
{
"category": "external",
"summary": "SUSE Bug 1268477 for CVE-2026-9679",
"url": "https://bugzilla.suse.com/1268477"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise High Performance Computing 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5-LTSS:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:npm18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-devel-0:18.20.8-8.44.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:nodejs18-docs-0:18.20.8-8.44.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.aarch64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP5:npm18-0:18.20.8-8.44.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-17T15:59:50Z",
"details": "moderate"
}
],
"title": "CVE-2026-9679"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…