RHSA-2026:45360 | Mondoo Vulnerability Intelligence

RHSA-2026:45360

HIGH7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 24, 2026

Modified 2 days ago

Fix available

Details

Details:

This update includes the following RPMs:

nodejs26:

nodejs26-26.5.0-1.4.hum1 (aarch64, x86_64)
nodejs26-bin-26.5.0-1.4.hum1 (noarch)
nodejs26-devel-26.5.0-1.4.hum1 (aarch64, x86_64)
nodejs26-docs-26.5.0-1.4.hum1 (noarch)
nodejs26-full-i18n-26.5.0-1.4.hum1 (aarch64, x86_64)
nodejs26-libs-26.5.0-1.4.hum1 (aarch64, x86_64)
nodejs26-npm-11.17.0-1.26.5.0.1.4.hum1 (noarch)
nodejs26-npm-bin-26.5.0-1.4.hum1 (noarch)
v8-14.6-devel-14.6.202.34-1.26.5.0.1.4.hum1 (aarch64, x86_64)
nodejs26-26.5.0-1.4.hum1.src (src)

Security Fix(es):

nodejs26:

CVE-2026-13149
CVE-2026-14257

Affected Packages

nodejs26

Red Hat hummingbird 1

Fixed in:

0:26.5.0-1.4.hum1

nodejs26-bin

Red Hat hummingbird 1

Fixed in:

0:26.5.0-1.4.hum1

nodejs26-devel

Red Hat hummingbird 1

Fixed in:

0:26.5.0-1.4.hum1

nodejs26-docs

Red Hat hummingbird 1

Fixed in:

0:26.5.0-1.4.hum1

nodejs26-full-i18n

Red Hat hummingbird 1

Fixed in:

0:26.5.0-1.4.hum1

nodejs26-libs

Red Hat hummingbird 1

Fixed in:

0:26.5.0-1.4.hum1

nodejs26-npm

Red Hat hummingbird 1

Fixed in:

0:11.17.0-1.26.5.0.1.4.hum1

nodejs26-npm-bin

Red Hat hummingbird 1

Fixed in:

0:26.5.0-1.4.hum1

v8-14.6-devel

Red Hat hummingbird 1

Fixed in:

0:14.6.202.34-1.26.5.0.1.4.hum1

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:45360

WEB

https://access.redhat.com/security/cve/CVE-2026-13149

WEB

https://access.redhat.com/security/cve/CVE-2026-14257

WEB

https://access.redhat.com/security/updates/classification/

WEB

https://images.redhat.com/

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_45360.json

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2026-13149 CVE-2026-14257

Ecosystems

Red Hat hummingbird 1

Timeline

PublishedJul 24, 2026

ModifiedOct 5, 2026