{"schema":"vulnpedia.research/1","cve":"CVE-2026-109829","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26","tags":["Mitigation","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-15T18:28:04.954Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-15T18:28:04.954Z","url":"https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26"},{"source":"nvd","sourceId":"CVE-2026-109829","modified":"2026-10-19T20:45:43.390","url":"https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26"},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26"}]},{"url":"https://cna.openjsf.org/security-advisories.html","tags":["Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-15T18:28:04.954Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-15T18:28:04.954Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"nvd","sourceId":"CVE-2026-109829","modified":"2026-10-19T20:45:43.390","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://cna.openjsf.org/security-advisories.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109829","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-109829"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553679","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553679"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-109829","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-109829"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109829","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109829"}]},{"url":"https://github.com/nodejs/undici/commit/26c2bfb3def0","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://github.com/nodejs/undici/commit/26c2bfb3def0"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84706","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84706"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84657","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84657"}]},{"source":"euvd","sourceId":"EUVD-2026-102309","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102309","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102309","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102309"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs24-0:24.21.0-1.5.hum1@aarch64","product":"nodejs24-0:24.21.0-1.5.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24@24.21.0-1.5.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs24-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-s390x-rpms","product":"nodejs24-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24-bin@24.21.0-1.5.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs24-docs-0:24.21.0-1.5.hum1@noarch@public-hummingbird-aarch64-rpms","product":"nodejs24-docs-0:24.21.0-1.5.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24-docs@24.21.0-1.5.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs24-full-i18n-0:24.21.0-1.5.hum1@x86_64","product":"nodejs24-full-i18n-0:24.21.0-1.5.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24-full-i18n@24.21.0-1.5.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs24-npm-0:11.19.0-1.24.21.0.1.5.hum1@noarch@public-hummingbird-s390x-rpms","product":"nodejs24-npm-0:11.19.0-1.24.21.0.1.5.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24-npm@11.19.0-1.24.21.0.1.5.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs26-0:26.11.1-0.4.hum1@aarch64","product":"nodejs26-0:26.11.1-0.4.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84657"}],"purl":"pkg:rpm/redhat/nodejs26@26.11.1-0.4.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs26-bin-0:26.11.1-0.4.hum1@noarch@public-hummingbird-s390x-rpms","product":"nodejs26-bin-0:26.11.1-0.4.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84657"}],"purl":"pkg:rpm/redhat/nodejs26-bin@26.11.1-0.4.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs26-docs-0:26.11.1-0.4.hum1@noarch@public-hummingbird-aarch64-rpms","product":"nodejs26-docs-0:26.11.1-0.4.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84657"}],"purl":"pkg:rpm/redhat/nodejs26-docs@26.11.1-0.4.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs26-full-i18n-0:26.11.1-0.4.hum1@x86_64","product":"nodejs26-full-i18n-0:26.11.1-0.4.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84657"}],"purl":"pkg:rpm/redhat/nodejs26-full-i18n@26.11.1-0.4.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:nodejs26-npm-0:11.20.0-1.26.11.1.0.4.hum1@noarch@public-hummingbird-s390x-rpms","product":"nodejs26-npm-0:11.20.0-1.26.11.1.0.4.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84657"}],"purl":"pkg:rpm/redhat/nodejs26-npm@11.20.0-1.26.11.1.0.4.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.5.hum1@aarch64","product":"v8-13.6-devel-0:13.6.233.17-1.24.21.0.1.5.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/v8-13.6-devel@13.6.233.17-1.24.21.0.1.5.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"Red Hat Hardened Images:v8-14.6-devel-0:14.6.202.34-1.26.11.1.0.4.hum1@x86_64","product":"v8-14.6-devel-0:14.6.202.34-1.26.11.1.0.4.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84657"}],"purl":"pkg:rpm/redhat/v8-14.6-devel@14.6.202.34-1.26.11.1.0.4.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"exploit_intelligence:exploit-intelligence/vulnerability-analysis-rhel9","product":"exploit-intelligence/vulnerability-analysis-rhel9 as a component of Exploit Intelligence","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vulnerability-analysis-rhel9@sha256:64fb01357ccdad3fde5b4448664a57967117e94418a26c6d8022fb4a7f31a4de?repository_url=registry.redhat.io/exploit-intelligence/vulnerability-analysis-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_10:nodejs-docs","product":"nodejs-docs as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-docs","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_10:nodejs24-libs","product":"nodejs24-libs as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs24-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_8:nodejs-full-i18n::nodejs:22","product":"nodejs-full-i18n (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-full-i18n?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_8:nodejs-packaging-bundler::nodejs:24","product":"nodejs-packaging-bundler (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-packaging-bundler?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_8:npm::nodejs:24","product":"npm (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/npm?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_9:nodejs-docs::nodejs:24","product":"nodejs-docs (nodejs:24) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_9:nodejs.src::nodejs:26","product":"nodejs.src (nodejs:26) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/nodejs?arch=src&rpmmod=nodejs:26","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_hardened_images:nodejs25.src","product":"nodejs25.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:rpm/redhat/nodejs25@25.9.0-1.7.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mod-arch-maas-rhel9","product":"rhoai/odh-mod-arch-maas-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-mod-arch-maas-rhel9@sha256:f46aa6658c532ac9e8fcb3feeb5d764d9ee0eaf9e8af0563e87ef3998b5e426e?repository_url=registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_openshift_data_foundation_4:odf4/ocs-client-console-rhel9","product":"odf4/ocs-client-console-rhel9 as a component of Red Hat Openshift Data Foundation 4","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/ocs-client-console-rhel9@sha256:7216ce2d92ad684f986c32dced35244e963be67154053b1969a05c93fbd9e966?repository_url=registry.redhat.io/odf4/ocs-client-console-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"self-service_automation_portal_2:ansible-automation-platform/bootc-automation-portal-rhel9","product":"ansible-automation-platform/bootc-automation-portal-rhel9 as a component of Self-service automation portal 2","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394?repository_url=registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"cryostat_4:cryostat/cryostat-openshift-console-plugin-rhel9","product":"cryostat/cryostat-openshift-console-plugin-rhel9 as a component of Cryostat 4","status":"known_not_affected","remediations":[],"justification":"component_not_present","purl":"pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:27ce23fe3bf779a813b98fe9fea4fae32c888eb497ebe0c0016c34f14f315512?repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_amq_broker_7:amq-broker-bin.zip","product":"amq-broker-bin.zip as a component of Red Hat AMQ Broker 7","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:generic/amq-broker-bin.zip@7.14.1.CR3","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_ansible_automation_platform_2:automation-platform-ui.src","product":"automation-platform-ui.src as a component of Red Hat Ansible Automation Platform 2","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/automation-platform-ui@2.6.15-1.el9ap?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_10:grafana","product":"grafana as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/grafana","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_10:grafana-selinux","product":"grafana-selinux as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/grafana-selinux","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_enterprise_linux_10:grafana.src","product":"grafana.src as a component of Red Hat Enterprise Linux 10","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/grafana?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_hardened_images:grafana12.4.src","product":"grafana12.4.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]},{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json","productId":"red_hat_openshift_data_foundation_4:odf4/mcg-core-rhel9","product":"odf4/mcg-core-rhel9 as a component of Red Hat Openshift Data Foundation 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/mcg-core-rhel9@sha256:a2819b6d8b236267e913eadd39b6d9dee93c666d37796f78b00a8d88e81ee311?repository_url=registry.redhat.io/odf4/mcg-core-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109829","modified":"2026-10-21T20:54:00+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109829.json"}]}],"vendorCoverage":{"total":170,"shown":32,"omitted":138,"source":"redhat"}}