critical
CVE-2025-55130
nodejs: Nodejs file permissions bypass
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Red Hat7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Bitnami9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Trivy's own label is CRITICAL. Rated critical by NVD, Bitnami, Photon OS. Rated lower by Red Hat (high), AlmaLinux (high), Amazon (high), Azure Linux (high), Oracle (high), Rocky Linux (high).
Description
A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files. This breaks the expected isolation guarantees and enables arbitrary file read/write, leading to potential system compromise. This vulnerability affects users of the permission model on Node.js v20, v22, v24, and v25.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | node, node-min | 20.20.0, 22.22.0, 24.13.0, 25.3.0 |
| Photon OS 4.0 | nodejs, nodejs-devel | 22.22.0-1.ph4 |
| Photon OS 5.0 | nodejs, nodejs-devel | 22.22.0-1.ph5 |
| alma 10 | nodejs-docs, nodejs24-docs, nodejs24-npm | 1:22.22.0-3.el10_1 and 2 more |
| alma 8 | nodejs:20::nodejs-nodemon, nodejs:20::nodejs-packaging, nodejs:20::nodejs-packaging-bundler and 20 more | 3.0.1-1.module_el8.10.0+3982+85c136aa and 11 more |
| alma 9 | nodejs:20::nodejs, nodejs:20::nodejs-devel, nodejs:20::nodejs-docs and 25 more | 1:20.20.0-1.module_el9.7.0+207+84573810 and 15 more |
| alpine 3.21 | nodejs | 22.22.2-r0 |
| alpine 3.22 | nodejs | 22.22.0-r0 |
| alpine 3.23 | nodejs | 24.13.0-r0 |
| alpine 3.24 | nodejs | 24.13.0-r0 |
| alpine edge | nodejs | 24.13.0-r0 |
| amazon linux 2023 | nodejs20, nodejs20-debuginfo, nodejs20-debugsource and 27 more | 1:20.20.0-1.amzn2023.0.1 and 8 more |
Show all 271 entries from 38 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | node | 20.20.0, 22.22.0, 24.13.0, 25.3.0 |
| bitnami::Bitnami Vulnerability Database | node-min | 20.20.0, 22.22.0, 24.13.0, 25.3.0 |
| Photon OS 4.0 | nodejs | 22.22.0-1.ph4 |
| Photon OS 4.0 | nodejs-devel | 22.22.0-1.ph4 |
| Photon OS 5.0 | nodejs | 22.22.0-1.ph5 |
| Photon OS 5.0 | nodejs-devel | 22.22.0-1.ph5 |
| alma 10 | nodejs-docs | 1:22.22.0-3.el10_1 |
| alma 10 | nodejs24-docs | 1:24.13.0-1.el10_1 |
| alma 10 | nodejs24-npm | 1:11.6.2-1.24.13.0.1.el10_1 |
| alma 8 | nodejs:20::nodejs-nodemon | 3.0.1-1.module_el8.10.0+3982+85c136aa |
| alma 8 | nodejs:20::nodejs-packaging | 2021.06-5.module_el8.10.0+4084+7c0af990 |
| alma 8 | nodejs:20::nodejs-packaging-bundler | 2021.06-5.module_el8.10.0+4084+7c0af990 |
| alma 8 | nodejs:22::nodejs | 1:22.22.0-1.module_el8.10.0+4112+db1af44b |
| alma 8 | nodejs:22::nodejs-devel | 1:22.22.0-1.module_el8.10.0+4112+db1af44b |
| alma 8 | nodejs:22::nodejs-docs | 1:22.22.0-1.module_el8.10.0+4112+db1af44b |
| alma 8 | nodejs:22::nodejs-full-i18n | 1:22.22.0-1.module_el8.10.0+4112+db1af44b |
| alma 8 | nodejs:22::nodejs-libs | 1:22.22.0-1.module_el8.10.0+4112+db1af44b |
| alma 8 | nodejs:22::nodejs-nodemon | 3.0.1-1.module_el8.10.0+4006+3c416519 |
| alma 8 | nodejs:22::nodejs-packaging | 2021.06-5.module_el8.10.0+4085+6f807d30 |
| alma 8 | nodejs:22::nodejs-packaging-bundler | 2021.06-5.module_el8.10.0+4085+6f807d30 |
| alma 8 | nodejs:22::npm | 1:10.9.4-1.22.22.0.1.module_el8.10.0+4112+db1af44b |
| alma 8 | nodejs:22::v8-12.4-devel | 3:12.4.254.21-1.22.22.0.1.module_el8.10.0+4112+db1af44b |
| alma 8 | nodejs:24::nodejs | 1:24.13.0-0.module_el8.10.0+4113+bc863bc2 |
| alma 8 | nodejs:24::nodejs-devel | 1:24.13.0-0.module_el8.10.0+4113+bc863bc2 |
| alma 8 | nodejs:24::nodejs-docs | 1:24.13.0-0.module_el8.10.0+4113+bc863bc2 |
| alma 8 | nodejs:24::nodejs-full-i18n | 1:24.13.0-0.module_el8.10.0+4113+bc863bc2 |
| alma 8 | nodejs:24::nodejs-libs | 1:24.13.0-0.module_el8.10.0+4113+bc863bc2 |
| alma 8 | nodejs:24::nodejs-nodemon | 3.0.3-1.module_el8.10.0+4061+f8ceeab9 |
| alma 8 | nodejs:24::nodejs-packaging | 2021.06-6.module_el8.10.0+4086+70facd4a |
| alma 8 | nodejs:24::nodejs-packaging-bundler | 2021.06-6.module_el8.10.0+4086+70facd4a |
| alma 8 | nodejs:24::npm | 1:11.6.2-1.24.13.0.0.module_el8.10.0+4113+bc863bc2 |
| alma 8 | nodejs:24::v8-13.6-devel | 3:13.6.233.17-1.24.13.0.0.module_el8.10.0+4113+bc863bc2 |
| alma 9 | nodejs:20::nodejs | 1:20.20.0-1.module_el9.7.0+207+84573810 |
| alma 9 | nodejs:20::nodejs-devel | 1:20.20.0-1.module_el9.7.0+207+84573810 |
| alma 9 | nodejs:20::nodejs-docs | 1:20.20.0-1.module_el9.7.0+207+84573810 |
| alma 9 | nodejs:20::nodejs-full-i18n | 1:20.20.0-1.module_el9.7.0+207+84573810 |
| alma 9 | nodejs:20::nodejs-nodemon | 3.0.1-1.module_el9.5.0+125+8dc38870 |
| alma 9 | nodejs:20::nodejs-packaging | 2021.06-5.module_el9.7.0+207+84573810 |
| alma 9 | nodejs:20::nodejs-packaging-bundler | 2021.06-5.module_el9.7.0+207+84573810 |
| alma 9 | nodejs:20::npm | 1:10.8.2-1.20.20.0.1.module_el9.7.0+207+84573810 |
| alma 9 | nodejs:22::nodejs | 1:22.22.0-1.module_el9.7.0+208+fb06c0ab |
| alma 9 | nodejs:22::nodejs-devel | 1:22.22.0-1.module_el9.7.0+208+fb06c0ab |
| alma 9 | nodejs:22::nodejs-docs | 1:22.22.0-1.module_el9.7.0+208+fb06c0ab |
| alma 9 | nodejs:22::nodejs-full-i18n | 1:22.22.0-1.module_el9.7.0+208+fb06c0ab |
| alma 9 | nodejs:22::nodejs-libs | 1:22.22.0-1.module_el9.7.0+208+fb06c0ab |
| alma 9 | nodejs:22::nodejs-nodemon | 3.0.1-1.module_el9.6.0+172+f0ba00ec |
| alma 9 | nodejs:22::nodejs-packaging | 2021.06-5.module_el9.7.0+208+fb06c0ab |
| alma 9 | nodejs:22::nodejs-packaging-bundler | 2021.06-5.module_el9.7.0+196+ac40ca3b |
| alma 9 | nodejs:22::npm | 1:10.9.4-1.22.22.0.1.module_el9.7.0+208+fb06c0ab |
| alma 9 | nodejs:22::v8-12.4-devel | 3:12.4.254.21-1.22.22.0.1.module_el9.7.0+208+fb06c0ab |
| alma 9 | nodejs:24::nodejs | 1:24.13.0-1.module_el9.7.0+209+ecf6523e |
| alma 9 | nodejs:24::nodejs-devel | 1:24.13.0-1.module_el9.7.0+209+ecf6523e |
| alma 9 | nodejs:24::nodejs-docs | 1:24.13.0-1.module_el9.7.0+209+ecf6523e |
| alma 9 | nodejs:24::nodejs-full-i18n | 1:24.13.0-1.module_el9.7.0+209+ecf6523e |
| alma 9 | nodejs:24::nodejs-libs | 1:24.13.0-1.module_el9.7.0+209+ecf6523e |
| alma 9 | nodejs:24::nodejs-nodemon | 3.0.3-3.module_el9.7.0+209+ecf6523e |
| alma 9 | nodejs:24::nodejs-packaging | 2021.06-6.module_el9.7.0+209+ecf6523e |
| alma 9 | nodejs:24::nodejs-packaging-bundler | 2021.06-6.module_el9.7.0+198+8bf605ba |
| alma 9 | nodejs:24::npm | 1:11.6.2-1.24.13.0.1.module_el9.7.0+209+ecf6523e |
| alma 9 | nodejs:24::v8-13.6-devel | 3:13.6.233.17-1.24.13.0.1.module_el9.7.0+209+ecf6523e |
| alpine 3.21 | nodejs | 22.22.2-r0 |
| alpine 3.22 | nodejs | 22.22.0-r0 |
| alpine 3.23 | nodejs | 24.13.0-r0 |
| alpine 3.24 | nodejs | 24.13.0-r0 |
| alpine edge | nodejs | 24.13.0-r0 |
| amazon linux 2023 | nodejs20 | 1:20.20.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs20-debuginfo | 1:20.20.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs20-debugsource | 1:20.20.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs20-devel | 1:20.20.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs20-docs | 1:20.20.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs20-full-i18n | 1:20.20.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs20-libs | 1:20.20.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs20-libs-debuginfo | 1:20.20.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs20-npm | 1:10.8.2-1.20.20.0.1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22 | 1:22.22.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22-debuginfo | 1:22.22.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22-debugsource | 1:22.22.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22-devel | 1:22.22.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22-docs | 1:22.22.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22-full-i18n | 1:22.22.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22-libs | 1:22.22.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22-libs-debuginfo | 1:22.22.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs22-npm | 1:10.9.4-1.22.22.0.1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24 | 1:24.13.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24-debuginfo | 1:24.13.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24-debugsource | 1:24.13.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24-devel | 1:24.13.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24-docs | 1:24.13.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24-full-i18n | 1:24.13.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24-libs | 1:24.13.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24-libs-debuginfo | 1:24.13.0-1.amzn2023.0.1 |
| amazon linux 2023 | nodejs24-npm | 1:11.6.2-1.24.13.0.1.amzn2023.0.1 |
| amazon linux 2023 | v8-11.3-devel | 3:11.3.244.8-1.20.20.0.1.amzn2023.0.1 |
| amazon linux 2023 | v8-12.4-devel | 3:12.4.254.21-1.22.22.0.1.amzn2023.0.1 |
| amazon linux 2023 | v8-13.6-devel | 3:13.6.233.17-1.24.13.0.1.amzn2023.0.1 |
| Azure Linux 3.0 | nodejs | 0:20.14.0-12.azl3 |
| chainguard | nodejs-20 | 20.20.0-r0 |
| chainguard | nodejs-22 | 22.22.0-r0 |
| chainguard | nodejs-24 | 24.13.0-r0 |
| chainguard | nodejs-25 | 25.3.0-r0 |
| debian 13 | nodejs | 20.19.2+dfsg-1+deb13u1 |
| debian 14 | nodejs | 22.22.0+dfsg+~cs22.19.6-1 |
| minimos | nodejs-20 | 20.20.0-r0 |
| minimos | nodejs-22 | 22.22.0-r0 |
| minimos | nodejs-24 | 24.13.0-r0 |
| minimos | nodejs-25 | 25.3.0-r0 |
| Oracle Linux 8 | nodejs | 1:24.13.0-0.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | nodejs-devel | 1:24.13.0-0.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | nodejs-docs | 1:24.13.0-0.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | nodejs-full-i18n | 1:24.13.0-0.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | nodejs-libs | 1:24.13.0-0.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | nodejs-nodemon | 3.0.3-1.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | nodejs-packaging | 2021.06-6.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | nodejs-packaging-bundler | 2021.06-6.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | npm | 1:11.6.2-1.24.13.0.0.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 8 | v8-12.4-devel | 3:12.4.254.21-1.22.22.0.1.module+el8.10.0+90783+325ded07 |
| Oracle Linux 8 | v8-13.6-devel | 3:13.6.233.17-1.24.13.0.0.module+el8.10.0+90779+0cc618fe |
| Oracle Linux 9 | nodejs | 1:24.13.0-1.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | nodejs-devel | 1:24.13.0-1.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | nodejs-docs | 1:24.13.0-1.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | nodejs-full-i18n | 1:24.13.0-1.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | nodejs-libs | 1:24.13.0-1.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | nodejs-nodemon | 3.0.3-3.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | nodejs-packaging | 2021.06-6.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | nodejs-packaging-bundler | 2021.06-6.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | npm | 1:11.6.2-1.24.13.0.1.module+el9.7.0+90805+68a1aa93 |
| Oracle Linux 9 | v8-12.4-devel | 3:12.4.254.21-1.22.22.0.1.module+el9.7.0+90816+ad59ca7b |
| Oracle Linux 9 | v8-13.6-devel | 3:13.6.233.17-1.24.13.0.1.module+el9.7.0+90805+68a1aa93 |
| rapidfort alma 9 | nodejs | 1:20.20.0-1.module+el9.7.0+23895+0637d423, 1:22.22.0-1.module_el9.7.0+208+fb06c0ab |
| rapidfort alma 9 | nodejs-docs | 1:20.20.0-1.module+el9.7.0+23895+0637d423, 1:22.22.0-1.module_el9.7.0+208+fb06c0ab |
| rapidfort alma 9 | nodejs-full-i18n | 1:20.20.0-1.module+el9.7.0+23895+0637d423, 1:22.22.0-1.module_el9.7.0+208+fb06c0ab |
| rapidfort alma 9 | nodejs-libs | 1:22.22.0-1.module+el9.7.0+23896+b5802de9 |
| rapidfort alma 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.7.0+23895+0637d423 |
| rapidfort alma 9 | npm | 1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423, 1:10.9.4-1.22.22.0.1.module_el9.7.0+208+fb06c0ab |
| rapidfort alpine 3.20 | nodejs | 22.22.0-r0 |
| rapidfort alpine 3.21 | nodejs | 22.22.0-r0 |
| rapidfort alpine 3.22 | nodejs | 22.22.0-r0 |
| rapidfort amazon linux 2023 | nodejs | 1:18.12.1-1.amzn2023.0.2 |
| rapidfort amazon linux 2023 | nodejs20 | 1:20.20.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs20-devel | 1:20.20.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs20-docs | 1:20.20.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs20-full-i18n | 1:20.20.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs20-libs | 1:20.20.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs20-npm | 1:10.8.2-1.20.20.0.1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs22 | 1:22.22.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs22-devel | 1:22.22.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs22-docs | 1:22.22.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs22-full-i18n | 1:22.22.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs22-libs | 1:22.22.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs22-npm | 1:10.9.4-1.22.22.0.1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs24 | 1:24.13.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs24-devel | 1:24.13.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs24-docs | 1:24.13.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs24-full-i18n | 1:24.13.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs24-libs | 1:24.13.0-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | nodejs24-npm | 1:11.6.2-1.24.13.0.1.amzn2023.0.1 |
| rapidfort debian 12 | nodejs | 0:20.19.2+dfsg-1+deb13u1, 0:22.22.0+dfsg+~cs22.19.6-1 |
| rapidfort debian 13 | nodejs | 0:20.19.2+dfsg-1+deb13u1, 0:22.22.0+dfsg+~cs22.19.6-1 |
| rapidfort fedora 43 | nodejs | 1:22.22.0-2.fc43 |
| rapidfort fedora 43 | nodejs-devel | 1:22.22.0-2.fc43 |
| rapidfort fedora 43 | nodejs-docs | 1:22.22.0-2.fc43 |
| rapidfort fedora 43 | nodejs-full-i18n | 1:22.22.0-2.fc43 |
| rapidfort fedora 43 | nodejs-libs | 1:22.22.0-2.fc43 |
| rapidfort fedora 43 | nodejs20 | 1:20.20.0-2.fc43 |
| rapidfort fedora 43 | nodejs20-devel | 1:20.20.0-2.fc43 |
| rapidfort fedora 43 | nodejs20-docs | 1:20.20.0-2.fc43 |
| rapidfort fedora 43 | nodejs20-full-i18n | 1:20.20.0-2.fc43 |
| rapidfort fedora 43 | nodejs20-libs | 1:20.20.0-2.fc43 |
| rapidfort fedora 43 | nodejs22 | 1:22.22.0-2.fc43 |
| rapidfort fedora 43 | nodejs24 | 1:24.13.0-4.fc43 |
| rapidfort fedora 43 | nodejs24-devel | 1:24.13.0-4.fc43 |
| rapidfort fedora 43 | nodejs24-docs | 1:24.13.0-4.fc43 |
| rapidfort fedora 43 | nodejs24-full-i18n | 1:24.13.0-4.fc43 |
| rapidfort fedora 43 | nodejs24-libs | 1:24.13.0-4.fc43 |
| rapidfort Oracle Linux 10 | nodejs | 1:22.22.0-3.el10_1 |
| rapidfort Oracle Linux 10 | nodejs-devel | 1:22.22.0-3.el10_1 |
| rapidfort Oracle Linux 10 | nodejs-docs | 1:22.22.0-3.el10_1 |
| rapidfort Oracle Linux 10 | nodejs-full-i18n | 1:22.22.0-3.el10_1 |
| rapidfort Oracle Linux 10 | nodejs-libs | 1:22.22.0-3.el10_1 |
| rapidfort Oracle Linux 10 | nodejs-npm | 1:10.9.4-1.22.22.0.3.el10_1 |
| rapidfort Oracle Linux 10 | nodejs24 | 1:24.13.0-1.0.1.el10_1 |
| rapidfort Oracle Linux 10 | nodejs24-devel | 1:24.13.0-1.0.1.el10_1 |
| rapidfort Oracle Linux 10 | nodejs24-docs | 1:24.13.0-1.0.1.el10_1 |
| rapidfort Oracle Linux 10 | nodejs24-full-i18n | 1:24.13.0-1.0.1.el10_1 |
| rapidfort Oracle Linux 10 | nodejs24-libs | 1:24.13.0-1.0.1.el10_1 |
| rapidfort Oracle Linux 10 | nodejs24-npm | 1:11.6.2-1.24.13.0.1.0.1.el10_1 |
| rapidfort Oracle Linux 9 | nodejs | 1:20.20.0-1.module+el9.7.0+23895+0637d423 |
| rapidfort Oracle Linux 9 | nodejs-devel | 1:20.20.0-1.module+el9.7.0+23895+0637d423 |
| rapidfort Oracle Linux 9 | nodejs-docs | 1:20.20.0-1.module+el9.7.0+23895+0637d423 |
| rapidfort Oracle Linux 9 | nodejs-full-i18n | 1:20.20.0-1.module+el9.7.0+23895+0637d423 |
| rapidfort Oracle Linux 9 | nodejs-libs | 1:22.22.0-1.module+el9.7.0+23896+b5802de9 |
| rapidfort Oracle Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.7.0+23895+0637d423 |
| rapidfort Oracle Linux 9 | npm | 1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423 |
| rapidfort Red Hat 9 | nodejs | 1:20.20.0-1.module+el9.7.0+23895+0637d423 |
| rapidfort Red Hat 9 | nodejs-docs | 1:20.20.0-1.module+el9.7.0+23895+0637d423 |
| rapidfort Red Hat 9 | nodejs-full-i18n | 1:20.20.0-1.module+el9.7.0+23895+0637d423 |
| rapidfort Red Hat 9 | nodejs-libs | 1:22.22.0-1.module+el9.7.0+23896+b5802de9 |
| rapidfort Red Hat 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.7.0+23895+0637d423 |
| rapidfort Red Hat 9 | npm | 1:10.8.2-1.20.20.0.1.module+el9.7.0+23895+0637d423 |
| rapidfort rocky 9 | nodejs | 1:20.20.0-1.module+el9.7.0+40082+4e93191d |
| rapidfort rocky 9 | nodejs-full-i18n | 1:20.20.0-1.module+el9.7.0+40082+4e93191d |
| rapidfort rocky 9 | nodejs-libs | 1:22.22.0-1.module+el9.7.0+40083+285810cf |
| rapidfort rocky 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.7.0+40018+a011993d |
| rapidfort rocky 9 | npm | 1:10.8.2-1.20.20.0.1.module+el9.7.0+40082+4e93191d |
| rapidfort ubuntu 20.04 | rf-nodejs | 0:22.22.0+dfsg+~cs22.19.6-1 |
| rapidfort ubuntu 22.04 | rf-nodejs | 0:22.22.0+dfsg+~cs22.19.6-1 |
| rapidfort ubuntu 24.04 | rf-nodejs | 0:22.22.0+dfsg+~cs22.19.6-1 |
| rocky 10 | nodejs | 1:22.22.0-3.el10_1 |
| rocky 10 | nodejs-devel | 1:22.22.0-3.el10_1 |
| rocky 10 | nodejs-docs | 1:22.22.0-3.el10_1 |
| rocky 10 | nodejs-full-i18n | 1:22.22.0-3.el10_1 |
| rocky 10 | nodejs-libs | 1:22.22.0-3.el10_1 |
| rocky 10 | nodejs-npm | 1:10.9.4-1.22.22.0.3.el10_1 |
| rocky 10 | nodejs24 | 1:24.13.0-1.el10_1 |
| rocky 10 | nodejs24-devel | 1:24.13.0-1.el10_1 |
| rocky 10 | nodejs24-docs | 1:24.13.0-1.el10_1 |
| rocky 10 | nodejs24-full-i18n | 1:24.13.0-1.el10_1 |
| rocky 10 | nodejs24-libs | 1:24.13.0-1.el10_1 |
| rocky 10 | nodejs24-npm | 1:11.6.2-1.24.13.0.1.el10_1 |
| rocky 8 | nodejs:20::nodejs | 1:20.20.0-1.module+el8.10.0+40077+29236b21 |
| rocky 8 | nodejs:20::nodejs-devel | 1:20.20.0-1.module+el8.10.0+40077+29236b21 |
| rocky 8 | nodejs:20::nodejs-docs | 1:20.20.0-1.module+el8.10.0+40077+29236b21 |
| rocky 8 | nodejs:20::nodejs-full-i18n | 1:20.20.0-1.module+el8.10.0+40077+29236b21 |
| rocky 8 | nodejs:20::nodejs-nodemon | 3.0.1-1.module+el8.10.0+1823+b5789597 |
| rocky 8 | nodejs:20::nodejs-packaging | 2021.06-5.module+el8.10.0+2084+ab509703 |
| rocky 8 | nodejs:20::nodejs-packaging-bundler | 2021.06-5.module+el8.10.0+2084+ab509703 |
| rocky 8 | nodejs:20::npm | 1:10.8.2-1.20.20.0.1.module+el8.10.0+40077+29236b21 |
| rocky 8 | nodejs:22::nodejs | 1:22.22.0-1.module+el8.10.0+40078+280dc7ce |
| rocky 8 | nodejs:22::nodejs-devel | 1:22.22.0-1.module+el8.10.0+40078+280dc7ce |
| rocky 8 | nodejs:22::nodejs-docs | 1:22.22.0-1.module+el8.10.0+40078+280dc7ce |
| rocky 8 | nodejs:22::nodejs-full-i18n | 1:22.22.0-1.module+el8.10.0+40078+280dc7ce |
| rocky 8 | nodejs:22::nodejs-libs | 1:22.22.0-1.module+el8.10.0+40078+280dc7ce |
| rocky 8 | nodejs:22::nodejs-nodemon | 3.0.1-1.module+el8.10.0+1823+b5789597 |
| rocky 8 | nodejs:22::nodejs-packaging | 2021.06-5.module+el8.10.0+2084+ab509703 |
| rocky 8 | nodejs:22::nodejs-packaging-bundler | 2021.06-5.module+el8.10.0+2084+ab509703 |
| rocky 8 | nodejs:22::npm | 1:10.9.4-1.22.22.0.1.module+el8.10.0+40078+280dc7ce |
| rocky 8 | nodejs:22::v8-12.4-devel | 3:12.4.254.21-1.22.22.0.1.module+el8.10.0+40078+280dc7ce |
| rocky 8 | nodejs:24::nodejs | 1:24.13.0-0.module+el8.10.0+40079+1d83e08b |
| rocky 8 | nodejs:24::nodejs-devel | 1:24.13.0-0.module+el8.10.0+40079+1d83e08b |
| rocky 8 | nodejs:24::nodejs-docs | 1:24.13.0-0.module+el8.10.0+40079+1d83e08b |
| rocky 8 | nodejs:24::nodejs-full-i18n | 1:24.13.0-0.module+el8.10.0+40079+1d83e08b |
| rocky 8 | nodejs:24::nodejs-libs | 1:24.13.0-0.module+el8.10.0+40079+1d83e08b |
| rocky 8 | nodejs:24::nodejs-nodemon | 3.0.3-1.module+el8.10.0+2084+ab509703 |
| rocky 8 | nodejs:24::nodejs-packaging | 2021.06-6.module+el8.10.0+40048+6d99f608 |
| rocky 8 | nodejs:24::nodejs-packaging-bundler | 2021.06-6.module+el8.10.0+40048+6d99f608 |
| rocky 8 | nodejs:24::npm | 1:11.6.2-1.24.13.0.0.module+el8.10.0+40079+1d83e08b |
| rocky 8 | nodejs:24::v8-13.6-devel | 3:13.6.233.17-1.24.13.0.0.module+el8.10.0+40079+1d83e08b |
| rocky 9 | nodejs:20::nodejs | 1:20.20.0-1.module+el9.7.0+40082+4e93191d |
| rocky 9 | nodejs:20::nodejs-devel | 1:20.20.0-1.module+el9.7.0+40082+4e93191d |
| rocky 9 | nodejs:20::nodejs-docs | 1:20.20.0-1.module+el9.7.0+40082+4e93191d |
| rocky 9 | nodejs:20::nodejs-full-i18n | 1:20.20.0-1.module+el9.7.0+40082+4e93191d |
| rocky 9 | nodejs:20::nodejs-libs | 1:22.22.0-1.module+el9.7.0+40083+285810cf |
| rocky 9 | nodejs:20::nodejs-nodemon | 3.0.1-1.module+el9.7.0+40022+9ecc286c |
| rocky 9 | nodejs:20::nodejs-packaging | 2021.06-5.module+el9.7.0+40050+22a42328 |
| rocky 9 | nodejs:20::nodejs-packaging-bundler | 2021.06-5.module+el9.7.0+40050+22a42328 |
| rocky 9 | nodejs:20::npm | 1:10.8.2-1.20.20.0.1.module+el9.7.0+40082+4e93191d |
| rocky 9 | nodejs:20::v8-12.4-devel | 3:12.4.254.21-1.22.22.0.1.module+el9.7.0+40083+285810cf |
| rocky 9 | nodejs:24::nodejs | 1:24.13.0-1.module+el9.7.0+40084+5fab4181 |
| rocky 9 | nodejs:24::nodejs-devel | 1:24.13.0-1.module+el9.7.0+40084+5fab4181 |
| rocky 9 | nodejs:24::nodejs-docs | 1:24.13.0-1.module+el9.7.0+40084+5fab4181 |
| rocky 9 | nodejs:24::nodejs-full-i18n | 1:24.13.0-1.module+el9.7.0+40084+5fab4181 |
| rocky 9 | nodejs:24::nodejs-libs | 1:24.13.0-1.module+el9.7.0+40084+5fab4181 |
| rocky 9 | nodejs:24::nodejs-nodemon | 3.0.3-3.module+el9.7.0+40025+0e0cf6b2 |
| rocky 9 | nodejs:24::nodejs-packaging | 2021.06-6.module+el9.7.0+40052+e32ea525 |
| rocky 9 | nodejs:24::nodejs-packaging-bundler | 2021.06-6.module+el9.7.0+40052+e32ea525 |
| rocky 9 | nodejs:24::npm | 1:11.6.2-1.24.13.0.1.module+el9.7.0+40084+5fab4181 |
| rocky 9 | nodejs:24::v8-13.6-devel | 3:13.6.233.17-1.24.13.0.1.module+el9.7.0+40084+5fab4181 |
| wolfi | nodejs-20 | 20.20.0-r0 |
| wolfi | nodejs-22 | 22.22.0-r0 |
| wolfi | nodejs-24 | 24.13.0-r0 |
| wolfi | nodejs-25 | 25.3.0-r0 |
References
- https://access.redhat.com/errata/RHSA-2026:1842
- https://access.redhat.com/errata/RHSA-2026:1843
- https://access.redhat.com/errata/RHSA-2026:2420
- https://access.redhat.com/errata/RHSA-2026:2421
- https://access.redhat.com/errata/RHSA-2026:2422
- https://access.redhat.com/errata/RHSA-2026:2767
- https://access.redhat.com/errata/RHSA-2026:2768
- https://access.redhat.com/errata/RHSA-2026:2781
All 44 references
- https://access.redhat.com/errata/RHSA-2026:2782
- https://access.redhat.com/errata/RHSA-2026:2783
- https://access.redhat.com/errata/RHSA-2026:2864
- https://access.redhat.com/errata/RHSA-2026:2899
- https://access.redhat.com/errata/RHSA-2026:6402
- https://access.redhat.com/errata/RHSA-2026:6431
- https://access.redhat.com/errata/RHSA-2026:7386
- https://access.redhat.com/errata/RHSA-2026:7387
- https://access.redhat.com/security/cve/CVE-2025-55130
- https://bugzilla.redhat.com/2431338
- https://bugzilla.redhat.com/2431340
- https://bugzilla.redhat.com/2431343
- https://bugzilla.redhat.com/2431349
- https://bugzilla.redhat.com/2431350
- https://bugzilla.redhat.com/2431352
- https://bugzilla.redhat.com/show_bug.cgi?id=2431338
- https://bugzilla.redhat.com/show_bug.cgi?id=2431340
- https://bugzilla.redhat.com/show_bug.cgi?id=2431343
- https://bugzilla.redhat.com/show_bug.cgi?id=2431349
- https://bugzilla.redhat.com/show_bug.cgi?id=2431350
- https://bugzilla.redhat.com/show_bug.cgi?id=2431352
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55130
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55131
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55132
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59465
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59466
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-21637
- https://errata.almalinux.org/9/ALSA-2026-2783.html
- https://errata.rockylinux.org/RLSA-2026:2783
- https://linux.oracle.com/cve/CVE-2025-55130.html
- https://linux.oracle.com/errata/ELSA-2026-2783.html
- https://nodejs.org/en/blog/vulnerability/december-2025-security-releases
- https://nvd.nist.gov/vuln/detail/CVE-2025-55130
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-55130.json
- https://www.cve.org/CVERecord?id=CVE-2025-55130