ELSA-2026-2782

ELSA-2026-2782 - nodejs:22 security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-02-18

Description


nodejs
[1:22.22.0-1]
- Update to 22.22.0
Resolves: RHEL-141879

nodejs-nodemon
[3.0.1-1]
- Rebase to 3.0.1
- Resolves: CVE-2022-25883

[2.0.20-2]
- Patch bundled glob-parent
- Resolves: CVE-2021-35065

[2.0.20-1]
- Rebase to 2.0.20
Resolves: CVE-2022-3517

[2.0.15-1]
- Resolves: RHBZ#2005419
- Resolves CVE-2020-28469
- Rebase to newest version
- Change source to npmjs.com

nodejs-packaging
[2021.06-5]
- nodejs.req to properly detect bundled deps


Related CVEs


CVE-2025-55130
CVE-2025-55131
CVE-2025-55132
CVE-2025-59465
CVE-2025-59466
CVE-2026-21637

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) nodejs-22.22.0-1.module+el9.7.0+90816+ad59ca7b.src.rpm75346c17061f038c9a2f6d0c861a8cef44592dbf622ed0afbaf6bfef1e76ef3c-ol9_aarch64_appstream
nodejs-nodemon-3.0.1-1.module+el9.7.0+90816+ad59ca7b.src.rpmb9332df7641dded35a04272d7120fd1b7517d458b2d516fb5940ced37cb8fa93-ol9_aarch64_appstream
nodejs-packaging-2021.06-5.module+el9.7.0+90816+ad59ca7b.src.rpma5f5edb68f085db24e3e7b4d4c58e9d0ff7605a4db82c8c3bebe222b8631e33c-ol9_aarch64_appstream
nodejs-22.22.0-1.module+el9.7.0+90816+ad59ca7b.aarch64.rpme5492e99787f778da3cda92d8b70f1cb5be62f187d7930c07c059d19ed2bfd37-ol9_aarch64_appstream
nodejs-devel-22.22.0-1.module+el9.7.0+90816+ad59ca7b.aarch64.rpm38888726fe00721c08354e84a443e90afd2eb0b96ada3d89158190517e6541b2-ol9_aarch64_appstream
nodejs-docs-22.22.0-1.module+el9.7.0+90816+ad59ca7b.noarch.rpmb7a37316fa840fae0c154024b5f6706c6789a368b4d69331a11ccc0c86a7b4a7-ol9_aarch64_appstream
nodejs-full-i18n-22.22.0-1.module+el9.7.0+90816+ad59ca7b.aarch64.rpm86c43531f476a31fbc3c9eb070edab9e378c3a5b6a1b52b1552214f8f392a18c-ol9_aarch64_appstream
nodejs-libs-22.22.0-1.module+el9.7.0+90816+ad59ca7b.aarch64.rpm41aeb92e902c872f240f1aacabd5a51bf1c4ac49095f57c17fd5d61e903c96bf-ol9_aarch64_appstream
nodejs-nodemon-3.0.1-1.module+el9.7.0+90816+ad59ca7b.noarch.rpm05592f1ffba58cfbe24e684e5438b9c28cf8b881ee3dc2d0427034abf9b175c5-ol9_aarch64_appstream
nodejs-packaging-2021.06-5.module+el9.7.0+90816+ad59ca7b.noarch.rpm5ab44158d5b6c6236153e808829f19dd6d12a1338d8bf66e6cf5f33912528f88-ol9_aarch64_appstream
nodejs-packaging-bundler-2021.06-5.module+el9.7.0+90816+ad59ca7b.noarch.rpmf1192f55f4eeeed10f3ad9ed5aad1f53cc598906d4deef3ddd49416632382fa1-ol9_aarch64_appstream
npm-10.9.4-1.22.22.0.1.module+el9.7.0+90816+ad59ca7b.aarch64.rpmc02db8419232246b0db8eb7e262e0edb851bca04f88163eb460f81bc2d9748a4-ol9_aarch64_appstream
v8-12.4-devel-12.4.254.21-1.22.22.0.1.module+el9.7.0+90816+ad59ca7b.aarch64.rpmdc68ac452aed9f3e1739c837fff5fcf77a48c937c32fc9b88910553073334db3-ol9_aarch64_appstream
Oracle Linux 9 (x86_64) nodejs-22.22.0-1.module+el9.7.0+90816+ad59ca7b.src.rpm75346c17061f038c9a2f6d0c861a8cef44592dbf622ed0afbaf6bfef1e76ef3c-ol9_x86_64_appstream
nodejs-nodemon-3.0.1-1.module+el9.7.0+90816+ad59ca7b.src.rpmb9332df7641dded35a04272d7120fd1b7517d458b2d516fb5940ced37cb8fa93-ol9_x86_64_appstream
nodejs-packaging-2021.06-5.module+el9.7.0+90816+ad59ca7b.src.rpma5f5edb68f085db24e3e7b4d4c58e9d0ff7605a4db82c8c3bebe222b8631e33c-ol9_x86_64_appstream
nodejs-22.22.0-1.module+el9.7.0+90816+ad59ca7b.x86_64.rpmb9b6761566ff86cb395e468dd4d6da51bd7078ff82ce0157b8271cb7fa7aef78-ol9_x86_64_appstream
nodejs-devel-22.22.0-1.module+el9.7.0+90816+ad59ca7b.x86_64.rpm7fe8a255293a5584af6a54671bfe40679296ae0a3404e3c65aa84b66b156d187-ol9_x86_64_appstream
nodejs-docs-22.22.0-1.module+el9.7.0+90816+ad59ca7b.noarch.rpmb7a37316fa840fae0c154024b5f6706c6789a368b4d69331a11ccc0c86a7b4a7-ol9_x86_64_appstream
nodejs-full-i18n-22.22.0-1.module+el9.7.0+90816+ad59ca7b.x86_64.rpmdbef1b0f8f20cafc6b575b307b113fd0ca59736c1fa56747e4b4a8f4ed295a02-ol9_x86_64_appstream
nodejs-libs-22.22.0-1.module+el9.7.0+90816+ad59ca7b.x86_64.rpm93adfb200bffc9c9bae651d19741f0d09e11771a7d6b84d0d9fdeff0261ee130-ol9_x86_64_appstream
nodejs-nodemon-3.0.1-1.module+el9.7.0+90816+ad59ca7b.noarch.rpm05592f1ffba58cfbe24e684e5438b9c28cf8b881ee3dc2d0427034abf9b175c5-ol9_x86_64_appstream
nodejs-packaging-2021.06-5.module+el9.7.0+90816+ad59ca7b.noarch.rpm5ab44158d5b6c6236153e808829f19dd6d12a1338d8bf66e6cf5f33912528f88-ol9_x86_64_appstream
nodejs-packaging-bundler-2021.06-5.module+el9.7.0+90816+ad59ca7b.noarch.rpmf1192f55f4eeeed10f3ad9ed5aad1f53cc598906d4deef3ddd49416632382fa1-ol9_x86_64_appstream
npm-10.9.4-1.22.22.0.1.module+el9.7.0+90816+ad59ca7b.x86_64.rpm7e4fd1a2e478bf9517538afaa1255153e752bf2b1d92989b3272cd4dde11cf7d-ol9_x86_64_appstream
v8-12.4-devel-12.4.254.21-1.22.22.0.1.module+el9.7.0+90816+ad59ca7b.x86_64.rpm32564c5e2d4b1aabe809a0b940339b214dc1a08011d97af313a2e6d220681f0e-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete