gpp_maybe Security update for nodejs24

SUSE-SLE-Module-Web-Scripting-15-SP7-2026-1299

This update for nodejs24 fixes the following issues: - Update to 24.14.1 - CVE-2026-21637: synchronous exceptions thrown during certain callbacks bypass the standard TLS error handling paths and can cause a denial of service (bsc#1256576). - CVE-2026-21710: uncaught TypeError exception can cause a denial of service (bsc#1260455). - CVE-2026-21712: malformed URL format can lead to a crash (bsc#1260460). - CVE-2026-21713: timing side-channel in HMAC verification via memcmp can lead to potential MAC forgery (bsc#1260463). - CVE-2026-21714: WINDOW_UPDATE frames on stream 0 can lead to memory leak (bsc#1260480). - CVE-2026-21715: permission model bypass in realpathSync.native can allow file existence disclosure (bsc#1260482). - CVE-2026-21716: promise-based FileHandle methods can be used to modify file permissions and ownership (bsc#1260462). - CVE-2026-21717: crafted request can lead to trivially predictable hash collisions (bsc#1260494).

• Release Date
  Apr 13 2026
• References
  Bugzilla: 1256572, 1256576, 1260455, 1260460, 1260462, 1260463, 1260480, 1260482, 1260494
  CVEs: CVE-2025-59464, CVE-2026-21637, CVE-2026-21710, CVE-2026-21712, CVE-2026-21713, CVE-2026-21714, CVE-2026-21715, CVE-2026-21716, CVE-2026-21717
• Type
  security
• Severity
  important

cloud_download Downloads

Web and Scripting Module 15.7 ppc64le

• Packages
  nodejs24
  Evented I/O for V8 JavaScript

  24.14.1-150700.15.8.1 lock rpm lock src

  nodejs24-devel
  Development headers for NodeJS 24.x

  24.14.1-150700.15.8.1 lock rpm

  nodejs24-docs
  Node.js API documentation

  24.14.1-150700.15.8.1 lock rpm

  npm24
  Package manager for Node.js

  24.14.1-150700.15.8.1 lock rpm

Web and Scripting Module 15.7 aarch64

• Packages
  nodejs24
  Evented I/O for V8 JavaScript

  24.14.1-150700.15.8.1 lock rpm lock src

  nodejs24-devel
  Development headers for NodeJS 24.x

  24.14.1-150700.15.8.1 lock rpm

  nodejs24-docs
  Node.js API documentation

  24.14.1-150700.15.8.1 lock rpm

  npm24
  Package manager for Node.js

  24.14.1-150700.15.8.1 lock rpm

Web and Scripting Module 15.7 s390x

• Packages
  nodejs24
  Evented I/O for V8 JavaScript

  24.14.1-150700.15.8.1 lock rpm lock src

  nodejs24-devel
  Development headers for NodeJS 24.x

  24.14.1-150700.15.8.1 lock rpm

  nodejs24-docs
  Node.js API documentation

  24.14.1-150700.15.8.1 lock rpm

  npm24
  Package manager for Node.js

  24.14.1-150700.15.8.1 lock rpm

Web and Scripting Module 15.7 x86_64

• Packages
  nodejs24
  Evented I/O for V8 JavaScript

  24.14.1-150700.15.8.1 lock rpm lock src

  nodejs24-devel
  Development headers for NodeJS 24.x

  24.14.1-150700.15.8.1 lock rpm

  nodejs24-docs
  Node.js API documentation

  24.14.1-150700.15.8.1 lock rpm

  npm24
  Package manager for Node.js

  24.14.1-150700.15.8.1 lock rpm