RHSA-2026:7387HighCVSS 7.5
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
🔗 CVE IDs covered (10)
📋 Description
CVE-2025-55130 — nodejs: Nodejs file permissions bypass CVE-2025-55131 — nodejs: Nodejs uninitialized memory exposure CVE-2025-55132 — nodejs: Nodejs filesystem permissions bypass CVE-2025-59464 — nodejs: Nodejs memory leak CVE-2025-59465 — nodejs: Nodejs denial of service CVE-2025-59466 — nodejs: Nodejs denial of service CVE-2026-21636 — nodejs: Nodejs network segmentation bypass CVE-2026-21637 — nodejs: Nodejs denial of service CVE-2026-21716 — nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership via incomplete security fix. CVE-2026-21717 — nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash collisions
🔗 References (15)
- selfhttps://access.redhat.com/errata/RHSA-2026:7387
- externalhttps://images.redhat.com/
- externalhttps://access.redhat.com/security/cve/CVE-2026-21637
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://access.redhat.com/security/cve/CVE-2026-21636
- externalhttps://access.redhat.com/security/cve/CVE-2025-59466
- externalhttps://access.redhat.com/security/cve/CVE-2025-59465
- externalhttps://access.redhat.com/security/cve/CVE-2025-59464
- externalhttps://access.redhat.com/security/cve/CVE-2025-55132
- externalhttps://access.redhat.com/security/cve/CVE-2025-55131
- externalhttps://access.redhat.com/security/cve/CVE-2025-55130
- externalhttps://access.redhat.com/security/cve/CVE-2026-21717
- externalhttps://access.redhat.com/security/cve/CVE-2026-21716
- externalhttps://access.redhat.com/security/cve/CVE-2026-45149
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7387.json