{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nodejs22",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nodejs22 fixes the following issues\n\nUpdate to 22.23.0:\n\n- CVE-2026-6733: undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response\n  delivery (bsc#1268479).\n- CVE-2026-9496: pacote: excessive CPU consumption in `addGitSha` when processing a specially crafted `spec.rawSpec`\n  value can lead to DoS (bsc#1266318).\n- CVE-2026-9679: undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding (bsc#1268477).\n- CVE-2026-11525: undici: undici: Weakening of cookie SameSite policy due to incorrect parsing of Set-Cookie header\n  (bsc#1268481).\n- CVE-2026-12151: undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames (bsc#1268482).\n- CVE-2026-27135: nghttp2: assertion failure due to missing state validation can lead to DoS (bsc#1259853).\n- CVE-2026-40170: ngtcp2: qlog parameters_set stack buffer overflow (bsc#1262274).\n- CVE-2026-42338: ip-address: Cross-site scripting via improper HTML escaping of untrusted input (bsc#1268097).\n- CVE-2026-48615: Proxy credentials leaked in ERR_PROXY_TUNNEL error message (bsc#1268598).\n- CVE-2026-48617: permission model enforcement bypass via `process.report.writeReport()` path misvalidation\n  (bsc#1268554).\n- CVE-2026-48618: Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to\n  resolver and verifier hostname normalization mismatch (bsc#1268593).\n- CVE-2026-48619: Unbounded memory growth in node:http2 clients via attacker-controlled ORIGIN frames (bsc#1268618).\n- CVE-2026-48928: Uppercase sni context matching can lead to mtls authorization bypass due to case-sensitive hostname\n  matching (bsc#1268605).\n- CVE-2026-48930: Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver\n  bindings (bsc#1268606).\n- CVE-2026-48931: HTTP Response Queue Poisoning via TOCTOU Race Condition in http.Agent (bsc#1268611).\n- CVE-2026-48933: Node.js WebCrypto AES Integer Overflow Leads to Remote Process Abort (bsc#1268592).\n- CVE-2026-48934: TLS host identity verification bypass via session reuse with different servername leads to\n  unauthorized connections (bsc#1268608).\n- CVE-2026-48935: Permission Model bypass via FileHandle.utimes() in the promises API (bsc#1268609).\n- CVE-2026-48937: servers keep accepting data even after sending a `GOAWAY` frame (bsc#1268555).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-2647,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2647,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2647",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2647-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:2647-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262647-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:2647-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047643.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1259853",
        "url": "https://bugzilla.suse.com/1259853"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262274",
        "url": "https://bugzilla.suse.com/1262274"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1266318",
        "url": "https://bugzilla.suse.com/1266318"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268097",
        "url": "https://bugzilla.suse.com/1268097"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268477",
        "url": "https://bugzilla.suse.com/1268477"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268479",
        "url": "https://bugzilla.suse.com/1268479"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268481",
        "url": "https://bugzilla.suse.com/1268481"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268482",
        "url": "https://bugzilla.suse.com/1268482"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268554",
        "url": "https://bugzilla.suse.com/1268554"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268555",
        "url": "https://bugzilla.suse.com/1268555"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268592",
        "url": "https://bugzilla.suse.com/1268592"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268593",
        "url": "https://bugzilla.suse.com/1268593"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268598",
        "url": "https://bugzilla.suse.com/1268598"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268605",
        "url": "https://bugzilla.suse.com/1268605"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268606",
        "url": "https://bugzilla.suse.com/1268606"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268608",
        "url": "https://bugzilla.suse.com/1268608"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268609",
        "url": "https://bugzilla.suse.com/1268609"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268611",
        "url": "https://bugzilla.suse.com/1268611"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1268618",
        "url": "https://bugzilla.suse.com/1268618"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-11525 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-11525/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-12151 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-12151/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-27135 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-27135/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40170 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40170/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42338 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42338/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48615 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48615/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48617 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48617/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48618 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48618/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48619 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48619/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48928 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48928/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48930 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48930/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48931 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48931/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48933 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48933/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48934 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48934/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48935 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48935/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-48937 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-48937/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-6733 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-6733/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-9496 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-9496/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-9679 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-9679/"
      }
    ],
    "title": "Security update for nodejs22",
    "tracking": {
      "current_release_date": "2026-06-26T10:34:05Z",
      "generator": {
        "date": "2026-06-26T10:34:05Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:2647-1",
      "initial_release_date": "2026-06-26T10:34:05Z",
      "revision_history": [
        {
          "date": "2026-06-26T10:34:05Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.0-150600.13.18.1.aarch64",
                "product": {
                  "name": "corepack22-22.23.0-150600.13.18.1.aarch64",
                  "product_id": "corepack22-22.23.0-150600.13.18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.0-150600.13.18.1.aarch64",
                "product": {
                  "name": "nodejs22-22.23.0-150600.13.18.1.aarch64",
                  "product_id": "nodejs22-22.23.0-150600.13.18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
                "product": {
                  "name": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
                  "product_id": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.0-150600.13.18.1.aarch64",
                "product": {
                  "name": "npm22-22.23.0-150600.13.18.1.aarch64",
                  "product_id": "npm22-22.23.0-150600.13.18.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.0-150600.13.18.1.i586",
                "product": {
                  "name": "corepack22-22.23.0-150600.13.18.1.i586",
                  "product_id": "corepack22-22.23.0-150600.13.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.0-150600.13.18.1.i586",
                "product": {
                  "name": "nodejs22-22.23.0-150600.13.18.1.i586",
                  "product_id": "nodejs22-22.23.0-150600.13.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.0-150600.13.18.1.i586",
                "product": {
                  "name": "nodejs22-devel-22.23.0-150600.13.18.1.i586",
                  "product_id": "nodejs22-devel-22.23.0-150600.13.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.0-150600.13.18.1.i586",
                "product": {
                  "name": "npm22-22.23.0-150600.13.18.1.i586",
                  "product_id": "npm22-22.23.0-150600.13.18.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
                "product": {
                  "name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
                  "product_id": "nodejs22-docs-22.23.0-150600.13.18.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.0-150600.13.18.1.ppc64le",
                "product": {
                  "name": "corepack22-22.23.0-150600.13.18.1.ppc64le",
                  "product_id": "corepack22-22.23.0-150600.13.18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
                "product": {
                  "name": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
                  "product_id": "nodejs22-22.23.0-150600.13.18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
                "product": {
                  "name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
                  "product_id": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.0-150600.13.18.1.ppc64le",
                "product": {
                  "name": "npm22-22.23.0-150600.13.18.1.ppc64le",
                  "product_id": "npm22-22.23.0-150600.13.18.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.0-150600.13.18.1.s390x",
                "product": {
                  "name": "corepack22-22.23.0-150600.13.18.1.s390x",
                  "product_id": "corepack22-22.23.0-150600.13.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.0-150600.13.18.1.s390x",
                "product": {
                  "name": "nodejs22-22.23.0-150600.13.18.1.s390x",
                  "product_id": "nodejs22-22.23.0-150600.13.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.0-150600.13.18.1.s390x",
                "product": {
                  "name": "nodejs22-devel-22.23.0-150600.13.18.1.s390x",
                  "product_id": "nodejs22-devel-22.23.0-150600.13.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.0-150600.13.18.1.s390x",
                "product": {
                  "name": "npm22-22.23.0-150600.13.18.1.s390x",
                  "product_id": "npm22-22.23.0-150600.13.18.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.0-150600.13.18.1.x86_64",
                "product": {
                  "name": "corepack22-22.23.0-150600.13.18.1.x86_64",
                  "product_id": "corepack22-22.23.0-150600.13.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.0-150600.13.18.1.x86_64",
                "product": {
                  "name": "nodejs22-22.23.0-150600.13.18.1.x86_64",
                  "product_id": "nodejs22-22.23.0-150600.13.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
                "product": {
                  "name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
                  "product_id": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.0-150600.13.18.1.x86_64",
                "product": {
                  "name": "npm22-22.23.0-150600.13.18.1.x86_64",
                  "product_id": "npm22-22.23.0-150600.13.18.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP6",
                  "product_id": "SUSE Linux Enterprise Server 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch"
        },
        "product_reference": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch"
        },
        "product_reference": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "nodejs22-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-docs-22.23.0-150600.13.18.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch"
        },
        "product_reference": "nodejs22-docs-22.23.0-150600.13.18.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.0-150600.13.18.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        },
        "product_reference": "npm22-22.23.0-150600.13.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-11525",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-11525"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Impact:\nWhen undici parses a Set-Cookie header, it accepts any SameSite attribute value that contains Strict, Lax, or None as a substring, rather than the case-insensitive exact match specified by RFC 6265. Non-spec values are silently mapped to one of the three standard tokens. For example, SameSite=NoneOfYourBusiness is parsed as None (the most permissive setting), and SameSite=StrictLax is parsed as Lax (a downgrade from Strict).\n\nAffected applications are those that consume Set-Cookie headers from server responses (for example via undici\u0027s fetch or proxy code paths) and then forward or rely on the parsed sameSite attribute. A malicious or non-compliant server can coerce the consumer\u0027s view of a cookie\u0027s SameSite policy to a weaker value, silently degrading the SameSite enforcement the cookie is supposed to provide.\n\nThis was introduced in undici 5.15.0 when the cookies feature was added.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nAfter parsing a Set-Cookie header, validate that the resulting sameSite attribute is one of \u0027Strict\u0027, \u0027Lax\u0027, or \u0027None\u0027 (exact, case-insensitive) before forwarding or relying on it.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-11525",
          "url": "https://www.suse.com/security/cve/CVE-2026-11525"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268481 for CVE-2026-11525",
          "url": "https://bugzilla.suse.com/1268481"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-11525"
    },
    {
      "cve": "CVE-2026-12151",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-12151"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Impact:\nThe undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments. A malicious WebSocket server can stream many small or empty continuation frames that each pass per-frame and cumulative-size validation, collectively causing unbounded memory growth in the client process. The result is memory exhaustion and a denial of service.\n\nAffected applications are those using the undici WebSocket client (new WebSocket(...)) or the WebSocketStream API that can be induced to connect to an attacker-controlled or compromised WebSocket endpoint.\n\nAll releases starting at undici 6.17.0 are affected.\n\nPatches:  Upgrade to undici \u003e= 6.26.0, \u003e= 7.28.0, or \u003e= 8.5.0.  Workarounds:\nNo workaround is available. The fix must be applied through an upgrade.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-12151",
          "url": "https://www.suse.com/security/cve/CVE-2026-12151"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268482 for CVE-2026-12151",
          "url": "https://bugzilla.suse.com/1268482"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-12151"
    },
    {
      "cve": "CVE-2026-27135",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-27135"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-27135",
          "url": "https://www.suse.com/security/cve/CVE-2026-27135"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1259835 for CVE-2026-27135",
          "url": "https://bugzilla.suse.com/1259835"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-27135"
    },
    {
      "cve": "CVE-2026-40170",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40170"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ngtcp2 is a C implementation of the IETF QUIC protocol. In versions prior to 1.22.1, ngtcp2_qlog_parameters_set_transport_params() serializes peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog is enabled, a remote peer can send sufficiently large transport parameters during the QUIC handshake to cause writes beyond the buffer boundary, resulting in a stack buffer overflow. This affects deployments that enable the qlog callback and process untrusted peer transport parameters. This issue has been fixed in version 1.22.1. If developers are unable to immediately upgrade, they can disable the qlog on client.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40170",
          "url": "https://www.suse.com/security/cve/CVE-2026-40170"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262273 for CVE-2026-40170",
          "url": "https://bugzilla.suse.com/1262273"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-40170"
    },
    {
      "cve": "CVE-2026-42338",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42338"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and AddressError.parseMessage (emitted by the Address6 constructor for invalid input) can contain unescaped attacker-controlled content in one branch. An application that (1) passes untrusted input to Address6 and (2) renders the output of these methods, or the thrown error\u0027s parseMessage, as HTML (e.g. via innerHTML) is vulnerable to cross-site scripting. This vulnerability is fixed in 10.1.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42338",
          "url": "https://www.suse.com/security/cve/CVE-2026-42338"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268097 for CVE-2026-42338",
          "url": "https://bugzilla.suse.com/1268097"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-42338"
    },
    {
      "cve": "CVE-2026-48615",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48615"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL` error messages.\r\n\r\nWhen proxy credentials are embedded in the proxy URL, they may be exposed through error handling paths and captured by logs, diagnostics, or other error consumers.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48615",
          "url": "https://www.suse.com/security/cve/CVE-2026-48615"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268598 for CVE-2026-48615",
          "url": "https://bugzilla.suse.com/1268598"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-48615"
    },
    {
      "cve": "CVE-2026-48617",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48617"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js Permission Model enforcement allows Bypass via `process.report.writeReport()` Path Misvalidation. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48617",
          "url": "https://www.suse.com/security/cve/CVE-2026-48617"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268554 for CVE-2026-48617",
          "url": "https://bugzilla.suse.com/1268554"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 2.9,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-48617"
    },
    {
      "cve": "CVE-2026-48618",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48618"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat.\r\n\r\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48618",
          "url": "https://www.suse.com/security/cve/CVE-2026-48618"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268593 for CVE-2026-48618",
          "url": "https://bugzilla.suse.com/1268593"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-48618"
    },
    {
      "cve": "CVE-2026-48619",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48619"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HTTP/2 client allows a server to send an unlimited number of ORIGIN frames, which could lead to an Out of Memory error on the client.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48619",
          "url": "https://www.suse.com/security/cve/CVE-2026-48619"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268618 for CVE-2026-48619",
          "url": "https://bugzilla.suse.com/1268618"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-48619"
    },
    {
      "cve": "CVE-2026-48928",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48928"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48928",
          "url": "https://www.suse.com/security/cve/CVE-2026-48928"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268605 for CVE-2026-48928",
          "url": "https://bugzilla.suse.com/1268605"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-48928"
    },
    {
      "cve": "CVE-2026-48930",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48930"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48930",
          "url": "https://www.suse.com/security/cve/CVE-2026-48930"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268606 for CVE-2026-48930",
          "url": "https://bugzilla.suse.com/1268606"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-48930"
    },
    {
      "cve": "CVE-2026-48931",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48931"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HTTP Agent can cause a client to accept as valid a response that is send before the client has sent the request.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48931",
          "url": "https://www.suse.com/security/cve/CVE-2026-48931"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268611 for CVE-2026-48931",
          "url": "https://bugzilla.suse.com/1268611"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-48931"
    },
    {
      "cve": "CVE-2026-48933",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48933"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48933",
          "url": "https://www.suse.com/security/cve/CVE-2026-48933"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268592 for CVE-2026-48933",
          "url": "https://bugzilla.suse.com/1268592"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-48933"
    },
    {
      "cve": "CVE-2026-48934",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48934"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js TLS host verification can cause an attacker to bypass certification validation.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48934",
          "url": "https://www.suse.com/security/cve/CVE-2026-48934"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268608 for CVE-2026-48934",
          "url": "https://bugzilla.suse.com/1268608"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-48934"
    },
    {
      "cve": "CVE-2026-48935",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48935"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js Permission API can cause a file metadata to be modified even on a path that was set as read-only with e.g. `--allow-fs-read`.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48935",
          "url": "https://www.suse.com/security/cve/CVE-2026-48935"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268609 for CVE-2026-48935",
          "url": "https://bugzilla.suse.com/1268609"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-48935"
    },
    {
      "cve": "CVE-2026-48937",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-48937"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a `GOAWAY` frame. This vulnerability affects two supported release lines: **Node.js 22** and **Node.js 24**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-48937",
          "url": "https://www.suse.com/security/cve/CVE-2026-48937"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268555 for CVE-2026-48937",
          "url": "https://bugzilla.suse.com/1268555"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-48937"
    },
    {
      "cve": "CVE-2026-6733",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-6733"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Impact:\nUndici\u0027s HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response onto an idle socket after a request completes. When the client dispatches the next request on that socket, it associates the injected response with the new request, causing responses to be delivered to the wrong requests.\n\nThis requires an attacker-controlled or compromised upstream HTTP/1.1 server and keep-alive connection reuse.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nDisable keep-alive connection reuse by setting keepAliveTimeout: 0 on the Client or Pool.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-6733",
          "url": "https://www.suse.com/security/cve/CVE-2026-6733"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268479 for CVE-2026-6733",
          "url": "https://bugzilla.suse.com/1268479"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-6733"
    },
    {
      "cve": "CVE-2026-9496",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-9496"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Versions of the package pacote from 11.2.7 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function\u0027s regex replacement and string-manipulation logic,  causing excessive CPU consumption and potentially stalling or crashing the process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-9496",
          "url": "https://www.suse.com/security/cve/CVE-2026-9496"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266318 for CVE-2026-9496",
          "url": "https://bugzilla.suse.com/1266318"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-9496"
    },
    {
      "cve": "CVE-2026-9679",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-9679"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Impact:\nundici\u0027s cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and %3D into their literal byte equivalents. RFC 6265 5.4 does not specify any decoding and browsers do not decode either.\n\nApplications that parse a Set-Cookie header and then forward the parsed value into a response header (proxies, middleware, SSR frameworks) become vulnerable to HTTP response header injection: an attacker-controlled upstream can inject arbitrary Set-Cookie, Location, or Cache-Control headers into the application\u0027s downstream response, enabling session fixation, open redirect, or cache poisoning.\n\nAffected applications are those that use undici\u0027s cookie parsing (parseSetCookie, parseCookie, getSetCookies) and forward the parsed cookie value into a response header.\n\nThis was introduced in undici 7.0.0 via PR #3789.\n\nPatches:\nUpgrade to undici v6.26.0, v7.28.0 or v8.5.0.\n\nWorkarounds:\nIf upgrade is not immediately possible, do not forward values returned by parseSetCookie/parseCookie/getSetCookies directly into response headers; sanitize the value first to strip or reject CR, LF, NUL, ;, and = bytes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-9679",
          "url": "https://www.suse.com/security/cve/CVE-2026-9679"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1268477 for CVE-2026-9679",
          "url": "https://bugzilla.suse.com/1268477"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.0-150600.13.18.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.0-150600.13.18.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.0-150600.13.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-26T10:34:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-9679"
    }
  ]
}