ELSA-2026-96236 - nodejs-nodemon security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-11-09 |
Description
[3.1.14-5]
- CVE-2026-102278 nodejs-nodemon: brace-expansion: Denial of Service via
uncontrolled recursion in nested brace patterns
[3.1.14-4]
- CVE-2026-102276 nodejs-nodemon: brace-expansion: Denial of Service via
stack exhaustion from crafted brace patterns
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
|
| Oracle Linux 10 (aarch64) | nodejs-nodemon-3.1.14-5.el10_2.src.rpm | 1092599ba8d90859b5471c7e8c646c909596d9b69489568e1cec5c30d77461fd | - | ol10_aarch64_appstream |
| nodejs-nodemon-3.1.14-5.el10_2.noarch.rpm | 96d66be2a7aaea8f770941e3527d3e5e14038dd6757e11b4e099eae9230d0226 | - | ol10_aarch64_appstream |
|
| Oracle Linux 10 (x86_64) | nodejs-nodemon-3.1.14-5.el10_2.src.rpm | 1092599ba8d90859b5471c7e8c646c909596d9b69489568e1cec5c30d77461fd | - | ol10_x86_64_appstream |
| nodejs-nodemon-3.1.14-5.el10_2.noarch.rpm | 96d66be2a7aaea8f770941e3527d3e5e14038dd6757e11b4e099eae9230d0226 | - | ol10_x86_64_appstream |
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team
