{"schema":"vulnpedia.research/1","cve":"CVE-2026-105483","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://nodejs.org/en/blog/vulnerability/october-2026-security-releases","tags":["vendor-reference"],"source":"mitre","sourceId":"hackerone","modified":"2026-10-23T16:15:05.773Z","origins":[{"source":"mitre","sourceId":"hackerone","modified":"2026-10-23T16:15:05.773Z","url":"https://nodejs.org/en/blog/vulnerability/october-2026-security-releases"},{"source":"nvd","sourceId":"CVE-2026-105483","modified":"2026-10-23T19:42:24.553","url":"https://nodejs.org/en/blog/vulnerability/october-2026-security-releases"},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://nodejs.org/en/blog/vulnerability/october-2026-security-releases"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-105483","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-105483"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559870","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559870"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-105483","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-105483"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105483","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105483"}]},{"url":"https://nodejs.org/en/blog/release/v24.22.1","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://nodejs.org/en/blog/release/v24.22.1"}]},{"source":"euvd","sourceId":"EUVD-2026-109100","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109100","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-109100","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-109100"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/CompleTetech-Security/node-cve-2026-105483-check","source":"poc-in-github","sourceId":"CVE-2026-105483","description":"Offline Node.js evidence checker for CVE-2026-105483: TLS fullwidth-IP hostname validation bypass. Single-file Python; JSON/CSV/HTML reports; no exploit payloads.","modified":"2026-10-26T05:10:54Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-105483","url":"https://github.com/CompleTetech-Security/node-cve-2026-105483-check"},{"source":"poc-in-github","sourceId":"CVE-2026-105483","modified":"2026-10-26T05:10:54Z","url":"https://github.com/CompleTetech-Security/node-cve-2026-105483-check"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_10:nodejs24","product":"nodejs24 as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs24","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_10:nodejs24-docs","product":"nodejs24-docs as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs24-docs","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_10:nodejs24-npm","product":"nodejs24-npm as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs24-npm","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_10:nodejs26.src","product":"nodejs26.src as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs26?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs-docs::nodejs:24","product":"nodejs-docs (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs-libs::nodejs:24","product":"nodejs-libs (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-libs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs-packaging-bundler::nodejs:24","product":"nodejs-packaging-bundler (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-packaging-bundler?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs-packaging::nodejs:24","product":"nodejs-packaging (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-packaging?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs::nodejs:24","product":"nodejs (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:v8-12.4-devel::nodejs:24","product":"v8-12.4-devel (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/v8-12.4-devel?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_9:nodejs-docs::nodejs:26","product":"nodejs-docs (nodejs:26) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:26","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_9:nodejs-full-i18n::nodejs:26","product":"nodejs-full-i18n (nodejs:26) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-full-i18n?rpmmod=nodejs:26","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_9:nodejs-libs::nodejs:26","product":"nodejs-libs (nodejs:26) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-libs?rpmmod=nodejs:26","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_9:nodejs.src::nodejs:26","product":"nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs?arch=src&rpmmod=nodejs:26","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_9:npm::nodejs:24","product":"npm (nodejs:24) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/npm?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_hardened_images:nodejs25.src","product":"nodejs25.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate do not pass untrusted hostnames that may contain non-ASCII or fullwidth digits into TLS clients such as tls.connect, https.request, or fetch. Restrict outbound TLS connections to trusted destinations only, and segment services that initiate TLS client connections from untrusted networks."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/nodejs25@25.9.0-1.7.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_10:nodejs","product":"nodejs as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_10:nodejs-docs","product":"nodejs-docs as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-docs","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_10:nodejs-libs","product":"nodejs-libs as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_10:nodejs22.src","product":"nodejs22.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs22?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs-docs::nodejs:22","product":"nodejs-docs (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs-libs::nodejs:22","product":"nodejs-libs (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-libs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs-nodemon::nodejs:22","product":"nodejs-nodemon (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-nodemon?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs-packaging.src::nodejs:22","product":"nodejs-packaging.src (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-packaging?arch=src&rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:nodejs::nodejs:22","product":"nodejs (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_8:v8-12.4-devel::nodejs:22","product":"v8-12.4-devel (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/v8-12.4-devel?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_9:nodejs-docs::nodejs:22","product":"nodejs-docs (nodejs:22) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_9:nodejs-libs::nodejs:22","product":"nodejs-libs (nodejs:22) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs-libs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_enterprise_linux_9:nodejs::nodejs:22","product":"nodejs (nodejs:22) as a component of Red Hat Enterprise Linux 9","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_hardened_images:hi/nodejs","product":"hi/nodejs as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:oci/nodejs@sha256:0b09273472d5eb02bd56df5e97aa44a9d6f406e117baef591d1edabdd4aa844a?repository_url=registry.redhat.io/hi/nodejs","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_hardened_images:nodejs22.src","product":"nodejs22.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs22?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]},{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json","productId":"red_hat_hardened_images:nodejs26.src","product":"nodejs26.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/nodejs26?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-105483","modified":"2026-10-23T18:19:30+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105483.json"}]}],"vendorCoverage":{"total":67,"shown":32,"omitted":35,"source":"redhat"}}