{"schema":"vulnpedia.research/1","cve":"CVE-2026-109924","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685","tags":["Vendor Advisory","WEB","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-15T18:16:48.452Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-15T18:16:48.452Z","url":"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685"},{"source":"nvd","sourceId":"CVE-2026-109924","modified":"2026-10-19T20:45:00.433","url":"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685"},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685"}]},{"url":"https://cna.openjsf.org/security-advisories.html","tags":["Vendor Advisory","WEB","vendor-reference"],"source":"mitre","sourceId":"openjs","modified":"2026-10-15T18:16:48.452Z","origins":[{"source":"mitre","sourceId":"openjs","modified":"2026-10-15T18:16:48.452Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"nvd","sourceId":"CVE-2026-109924","modified":"2026-10-19T20:45:00.433","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://cna.openjsf.org/security-advisories.html"},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://cna.openjsf.org/security-advisories.html"}]},{"url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109924","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109924"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109924"},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109924"}]},{"url":"https://github.com/nodejs/undici/commit/299162740d5f39120092277e70efacb4d151c1c6","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://github.com/nodejs/undici/commit/299162740d5f39120092277e70efacb4d151c1c6"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://github.com/nodejs/undici/commit/299162740d5f39120092277e70efacb4d151c1c6"}]},{"url":"https://github.com/nodejs/undici/commit/789ef26461c648480433846607154f52d74ec9ab","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://github.com/nodejs/undici/commit/789ef26461c648480433846607154f52d74ec9ab"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://github.com/nodejs/undici/commit/789ef26461c648480433846607154f52d74ec9ab"}]},{"url":"https://github.com/nodejs/undici/commit/c43b23fdc6b37e1283d4347408bb16800f867d9e","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://github.com/nodejs/undici/commit/c43b23fdc6b37e1283d4347408bb16800f867d9e"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://github.com/nodejs/undici/commit/c43b23fdc6b37e1283d4347408bb16800f867d9e"}]},{"url":"https://github.com/nodejs/undici","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://github.com/nodejs/undici"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://github.com/nodejs/undici"}]},{"url":"https://github.com/nodejs/undici/releases/tag/v6.29.1","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://github.com/nodejs/undici/releases/tag/v6.29.1"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://github.com/nodejs/undici/releases/tag/v6.29.1"}]},{"url":"https://github.com/nodejs/undici/releases/tag/v7.30.1","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://github.com/nodejs/undici/releases/tag/v7.30.1"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://github.com/nodejs/undici/releases/tag/v7.30.1"}]},{"url":"https://github.com/nodejs/undici/releases/tag/v8.12.2","tags":["WEB"],"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://github.com/nodejs/undici/releases/tag/v8.12.2"},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://github.com/nodejs/undici/releases/tag/v8.12.2"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-109924","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-109924"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553663","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553663"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-109924","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-109924"}]},{"url":"https://github.com/nodejs/undici/commit/789ef26461c","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://github.com/nodejs/undici/commit/789ef26461c"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84706","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84706"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84657","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84657"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:87703","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://access.redhat.com/errata/RHSA-2026:87703"}]},{"source":"euvd","sourceId":"EUVD-2026-102249","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102249","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-102249","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102249"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685","ecosystem":"npm","name":"undici","purl":"pkg:npm/undici","ranges":[{"type":"SEMVER","events":[{"introduced":"6.5.0"},{"fixed":"6.29.1"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-4qv8-2p9j-2685/GHSA-4qv8-2p9j-2685.json"},"modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685"}]},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685","ecosystem":"npm","name":"undici","purl":"pkg:npm/undici","ranges":[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.30.1"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-4qv8-2p9j-2685/GHSA-4qv8-2p9j-2685.json"},"modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685"}]},{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685","ecosystem":"npm","name":"undici","purl":"pkg:npm/undici","ranges":[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.12.2"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-4qv8-2p9j-2685/GHSA-4qv8-2p9j-2685.json"},"modified":"2026-10-23T22:30:04.104974737Z","origins":[{"source":"ghsa","sourceId":"GHSA-4qv8-2p9j-2685","modified":"2026-10-23T22:30:04.104974737Z","url":"https://osv.dev/vulnerability/GHSA-4qv8-2p9j-2685"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs24-0:24.21.0-1.5.hum1@aarch64","product":"nodejs24-0:24.21.0-1.5.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24@24.21.0-1.5.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs24-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nodejs24-bin-0:24.21.0-1.5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24-bin@24.21.0-1.5.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs24-docs-0:24.21.0-1.5.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nodejs24-docs-0:24.21.0-1.5.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24-docs@24.21.0-1.5.hum1?arch=noarch&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs24-libs-0:24.21.0-1.5.hum1@x86_64","product":"nodejs24-libs-0:24.21.0-1.5.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84706"}],"purl":"pkg:rpm/redhat/nodejs24-libs@24.21.0-1.5.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-0:26.11.1-0.4.hum1@aarch64","product":"nodejs26-0:26.11.1-0.4.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84657"}],"purl":"pkg:rpm/redhat/nodejs26@26.11.1-0.4.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-1:26.12.1-0.1.hum1@src","product":"nodejs26-1:26.12.1-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87703"}],"purl":"pkg:rpm/redhat/nodejs26@26.12.1-0.1.hum1?arch=src&epoch=1&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-bin-1:26.12.1-0.1.hum1@noarch@public-hummingbird-s390x-rpms","product":"nodejs26-bin-1:26.12.1-0.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87703"}],"purl":"pkg:rpm/redhat/nodejs26-bin@26.12.1-0.1.hum1?arch=noarch&epoch=1&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-devel-1:26.12.1-0.1.hum1@s390x","product":"nodejs26-devel-1:26.12.1-0.1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87703"}],"purl":"pkg:rpm/redhat/nodejs26-devel@26.12.1-0.1.hum1?arch=s390x&epoch=1&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-docs-1:26.12.1-0.1.hum1@noarch@public-hummingbird-s390x-rpms","product":"nodejs26-docs-1:26.12.1-0.1.hum1@noarch@public-hummingbird-s390x-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87703"}],"purl":"pkg:rpm/redhat/nodejs26-docs@26.12.1-0.1.hum1?arch=noarch&epoch=1&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-full-i18n-1:26.12.1-0.1.hum1@s390x","product":"nodejs26-full-i18n-1:26.12.1-0.1.hum1@s390x as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87703"}],"purl":"pkg:rpm/redhat/nodejs26-full-i18n@26.12.1-0.1.hum1?arch=s390x&epoch=1&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-libs-1:26.12.1-0.1.hum1@x86_64","product":"nodejs26-libs-1:26.12.1-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87703"}],"purl":"pkg:rpm/redhat/nodejs26-libs@26.12.1-0.1.hum1?arch=x86_64&epoch=1&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-npm-1:11.20.0-1.26.12.1.0.1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nodejs26-npm-1:11.20.0-1.26.12.1.0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87703"}],"purl":"pkg:rpm/redhat/nodejs26-npm@11.20.0-1.26.12.1.0.1.hum1?arch=noarch&epoch=1&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:nodejs26-npm-bin-1:26.12.1-0.1.hum1@noarch@public-hummingbird-x86_64-rpms","product":"nodejs26-npm-bin-1:26.12.1-0.1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:87703"}],"purl":"pkg:rpm/redhat/nodejs26-npm-bin@26.12.1-0.1.hum1?arch=noarch&epoch=1&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:v8-14.6-devel-0:14.6.202.34-1.26.11.1.0.4.hum1@x86_64","product":"v8-14.6-devel-0:14.6.202.34-1.26.11.1.0.4.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:84657"}],"purl":"pkg:rpm/redhat/v8-14.6-devel@14.6.202.34-1.26.11.1.0.4.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"cryostat_4:cryostat/cryostat-openshift-console-plugin-rhel9","product":"cryostat/cryostat-openshift-console-plugin-rhel9 as a component of Cryostat 4","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:27ce23fe3bf779a813b98fe9fea4fae32c888eb497ebe0c0016c34f14f315512?repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_developer_hub:rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator","product":"rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator as a component of Red Hat Developer Hub","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:924c4e5e8642438f3099272ff7edd746a66fcec4779aeafb9fd6b3ae0c594f72?repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_enterprise_linux_10:nodejs-full-i18n","product":"nodejs-full-i18n as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/nodejs-full-i18n","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_enterprise_linux_10:nodejs24-npm","product":"nodejs24-npm as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/nodejs24-npm","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_enterprise_linux_8:nodejs-docs::nodejs:24","product":"nodejs-docs (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/nodejs-docs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_enterprise_linux_8:nodejs-packaging-bundler::nodejs:22","product":"nodejs-packaging-bundler (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/nodejs-packaging-bundler?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_enterprise_linux_8:nodejs::nodejs:24","product":"nodejs (nodejs:24) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/nodejs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_enterprise_linux_8:v8-13.6-devel::nodejs:22","product":"v8-13.6-devel (nodejs:22) as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/v8-13.6-devel?rpmmod=nodejs:22","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_enterprise_linux_9:nodejs-libs::nodejs:24","product":"nodejs-libs (nodejs:24) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/nodejs-libs?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_enterprise_linux_9:npm::nodejs:24","product":"npm (nodejs:24) as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/npm?rpmmod=nodejs:24","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9","product":"rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-mlflow-rhel9@sha256:26ac33d2d07f9d51df725604ca695c98597f9bf428f6038bb1d74f9405e8db2d?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","product":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:7b24ef41420bc79e19ff6349bb4760b2834bdc245eeb0b9191a8e77d90515a3a?repository_url=registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_openshift_data_foundation_4:odf4/odf-console-rhel9","product":"odf4/odf-console-rhel9 as a component of Red Hat Openshift Data Foundation 4","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/odf-console-rhel9@sha256:828bd1ff329bcaf07bfa18df334190354753e0ccf75bebf4a441b152141c9168?repository_url=registry.redhat.io/odf4/odf-console-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"self-service_automation_portal_2:ansible-automation-platform/bootc-automation-portal-rhel9","product":"ansible-automation-platform/bootc-automation-portal-rhel9 as a component of Self-service automation portal 2","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394?repository_url=registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:v8-14.6-devel-3:14.6.202.34-1.26.12.1.0.1.hum1@aarch64","product":"v8-14.6-devel-3:14.6.202.34-1.26.12.1.0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/v8-14.6-devel@14.6.202.34-1.26.12.1.0.1.hum1?arch=aarch64&epoch=3&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:v8-14.6-devel-3:14.6.202.34-1.26.12.1.0.1.hum1@s390x","product":"v8-14.6-devel-3:14.6.202.34-1.26.12.1.0.1.hum1@s390x as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/v8-14.6-devel@14.6.202.34-1.26.12.1.0.1.hum1?arch=s390x&epoch=3&distro=hummingbird-20251124&repository_id=public-hummingbird-s390x-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"Red Hat Hardened Images:v8-14.6-devel-3:14.6.202.34-1.26.12.1.0.1.hum1@x86_64","product":"v8-14.6-devel-3:14.6.202.34-1.26.12.1.0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/v8-14.6-devel@14.6.202.34-1.26.12.1.0.1.hum1?arch=x86_64&epoch=3&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]},{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json","productId":"red_hat_hardened_images:grafana12.4.src","product":"grafana12.4.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/grafana12.4@12.4.12-0.4.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-109924","modified":"2026-10-22T06:02:38+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-109924.json"}]}],"vendorCoverage":{"total":198,"shown":32,"omitted":166,"source":"redhat"}}