{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nodejs22",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nodejs22 fixes the following issues:\n\nUpdate to 22.23.2.\n\n- CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust-\n  boundary checks (bsc#1272882).\n- CVE-2026-56846: HTTP/2 retained headers can bypass `maxSessionMemory` limits (bsc#1272941).\n- CVE-2026-56847: permission model allows trace events to write outside the `allowlist` (bsc#1272949).\n- CVE-2026-56848: HTTP/2 re-entrant send can cause heap-use-after-free (bsc#1272942).\n- CVE-2026-56850: HTTPS agent can reuse mTLS identities across PFX certificates (bsc#1272944).\n- CVE-2026-58039: permission model allows process reports to write outside the `allowlist` (bsc#1272950).\n- CVE-2026-58040: HTTPS agent session reuse can skip hostname verification (bsc#1272945).\n- CVE-2026-58042: `dns.resolveAny()` can abort on DNS responses with many A records (bsc#1272947).\n- CVE-2026-58043: permission model path matching can over-grant filesystem access (bsc#1272943).\n- CVE-2026-58044: HTTP parser header truncation can enable request smuggling (bsc#1272951).\n- CVE-2026-58045: `node:zlib` sync APIs can crash on spoofed `TypedArray` length (bsc#1272948).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-3521,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3521,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3521",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_3521-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:3521-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20263521-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:3521-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028162.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272882",
        "url": "https://bugzilla.suse.com/1272882"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272941",
        "url": "https://bugzilla.suse.com/1272941"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272942",
        "url": "https://bugzilla.suse.com/1272942"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272943",
        "url": "https://bugzilla.suse.com/1272943"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272944",
        "url": "https://bugzilla.suse.com/1272944"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272945",
        "url": "https://bugzilla.suse.com/1272945"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272947",
        "url": "https://bugzilla.suse.com/1272947"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272948",
        "url": "https://bugzilla.suse.com/1272948"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272949",
        "url": "https://bugzilla.suse.com/1272949"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272950",
        "url": "https://bugzilla.suse.com/1272950"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1272951",
        "url": "https://bugzilla.suse.com/1272951"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-54272 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-54272/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56846 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56846/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56847 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56847/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56848 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56848/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56850 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56850/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58039 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58039/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58040 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58040/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58042 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58042/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58043 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58043/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58044 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58044/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-58045 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-58045/"
      }
    ],
    "title": "Security update for nodejs22",
    "tracking": {
      "current_release_date": "2026-08-06T11:31:28Z",
      "generator": {
        "date": "2026-08-06T11:31:28Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:3521-1",
      "initial_release_date": "2026-08-06T11:31:28Z",
      "revision_history": [
        {
          "date": "2026-08-06T11:31:28Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.2-150600.13.24.1.aarch64",
                "product": {
                  "name": "corepack22-22.23.2-150600.13.24.1.aarch64",
                  "product_id": "corepack22-22.23.2-150600.13.24.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.2-150600.13.24.1.aarch64",
                "product": {
                  "name": "nodejs22-22.23.2-150600.13.24.1.aarch64",
                  "product_id": "nodejs22-22.23.2-150600.13.24.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
                "product": {
                  "name": "nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
                  "product_id": "nodejs22-devel-22.23.2-150600.13.24.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.2-150600.13.24.1.aarch64",
                "product": {
                  "name": "npm22-22.23.2-150600.13.24.1.aarch64",
                  "product_id": "npm22-22.23.2-150600.13.24.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.2-150600.13.24.1.i586",
                "product": {
                  "name": "corepack22-22.23.2-150600.13.24.1.i586",
                  "product_id": "corepack22-22.23.2-150600.13.24.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.2-150600.13.24.1.i586",
                "product": {
                  "name": "nodejs22-22.23.2-150600.13.24.1.i586",
                  "product_id": "nodejs22-22.23.2-150600.13.24.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.2-150600.13.24.1.i586",
                "product": {
                  "name": "nodejs22-devel-22.23.2-150600.13.24.1.i586",
                  "product_id": "nodejs22-devel-22.23.2-150600.13.24.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.2-150600.13.24.1.i586",
                "product": {
                  "name": "npm22-22.23.2-150600.13.24.1.i586",
                  "product_id": "npm22-22.23.2-150600.13.24.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs22-docs-22.23.2-150600.13.24.1.noarch",
                "product": {
                  "name": "nodejs22-docs-22.23.2-150600.13.24.1.noarch",
                  "product_id": "nodejs22-docs-22.23.2-150600.13.24.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.2-150600.13.24.1.ppc64le",
                "product": {
                  "name": "corepack22-22.23.2-150600.13.24.1.ppc64le",
                  "product_id": "corepack22-22.23.2-150600.13.24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.2-150600.13.24.1.ppc64le",
                "product": {
                  "name": "nodejs22-22.23.2-150600.13.24.1.ppc64le",
                  "product_id": "nodejs22-22.23.2-150600.13.24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
                "product": {
                  "name": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
                  "product_id": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.2-150600.13.24.1.ppc64le",
                "product": {
                  "name": "npm22-22.23.2-150600.13.24.1.ppc64le",
                  "product_id": "npm22-22.23.2-150600.13.24.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.2-150600.13.24.1.s390x",
                "product": {
                  "name": "corepack22-22.23.2-150600.13.24.1.s390x",
                  "product_id": "corepack22-22.23.2-150600.13.24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.2-150600.13.24.1.s390x",
                "product": {
                  "name": "nodejs22-22.23.2-150600.13.24.1.s390x",
                  "product_id": "nodejs22-22.23.2-150600.13.24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.2-150600.13.24.1.s390x",
                "product": {
                  "name": "nodejs22-devel-22.23.2-150600.13.24.1.s390x",
                  "product_id": "nodejs22-devel-22.23.2-150600.13.24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.2-150600.13.24.1.s390x",
                "product": {
                  "name": "npm22-22.23.2-150600.13.24.1.s390x",
                  "product_id": "npm22-22.23.2-150600.13.24.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "corepack22-22.23.2-150600.13.24.1.x86_64",
                "product": {
                  "name": "corepack22-22.23.2-150600.13.24.1.x86_64",
                  "product_id": "corepack22-22.23.2-150600.13.24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-22.23.2-150600.13.24.1.x86_64",
                "product": {
                  "name": "nodejs22-22.23.2-150600.13.24.1.x86_64",
                  "product_id": "nodejs22-22.23.2-150600.13.24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
                "product": {
                  "name": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
                  "product_id": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm22-22.23.2-150600.13.24.1.x86_64",
                "product": {
                  "name": "npm22-22.23.2-150600.13.24.1.x86_64",
                  "product_id": "npm22-22.23.2-150600.13.24.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP6",
                  "product_id": "SUSE Linux Enterprise Server 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:15:sp6"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp6"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-docs-22.23.2-150600.13.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch"
        },
        "product_reference": "nodejs22-docs-22.23.2-150600.13.24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-docs-22.23.2-150600.13.24.1.noarch as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch"
        },
        "product_reference": "nodejs22-docs-22.23.2-150600.13.24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "nodejs22-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs22-docs-22.23.2-150600.13.24.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch"
        },
        "product_reference": "nodejs22-docs-22.23.2-150600.13.24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm22-22.23.2-150600.13.24.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        },
        "product_reference": "npm22-22.23.2-150600.13.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-54272",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-54272"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType() classifies an address by matching it against a table of known IPv6 special-use prefixes, returning Global unicast when nothing matches. That table had no entry for the IPv4-mapped range (::ffff:0:0/96), so every mapped address fell through to Global unicast; NAT64 addresses matched their own NAT64 ... labels. The boolean checks isLoopback, isUnspecified, and isMulticast compared getType() against a fixed label and so returned false, while isLinkLocal and isULA checked only the native IPv6 ranges. The library already exposed isMapped4() and to4(), but did not apply them inside these checks, so a mapped or NAT64 address was never normalized to its embedded IPv4 address before classification. For IPv4-mapped addresses the host OS routes to the IPv4 stack, so the misclassification is reachable on any dual-stack host. For NAT64, the classification bypass is unconditional but end-to-end reachability additionally requires a NAT64/DNS64 gateway in the deployment network.This issue has been fixed in version 10.2.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-54272",
          "url": "https://www.suse.com/security/cve/CVE-2026-54272"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272881 for CVE-2026-54272",
          "url": "https://bugzilla.suse.com/1272881"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-54272"
    },
    {
      "cve": "CVE-2026-56846",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56846"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable remote memory exhaustion.\r\n\r\nThis vulnerability affects Node.js **24.x** and **22.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56846",
          "url": "https://www.suse.com/security/cve/CVE-2026-56846"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272941 for CVE-2026-56846",
          "url": "https://bugzilla.suse.com/1272941"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-56846"
    },
    {
      "cve": "CVE-2026-56847",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56847"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`.\r\n\r\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56847",
          "url": "https://www.suse.com/security/cve/CVE-2026-56847"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272949 for CVE-2026-56847",
          "url": "https://bugzilla.suse.com/1272949"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56847"
    },
    {
      "cve": "CVE-2026-56848",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56848"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2_session_mem_recv()` is executing, resulting in a heap-use-after-free.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56848",
          "url": "https://www.suse.com/security/cve/CVE-2026-56848"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272942 for CVE-2026-56848",
          "url": "https://bugzilla.suse.com/1272942"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-56848"
    },
    {
      "cve": "CVE-2026-56850",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56850"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56850",
          "url": "https://www.suse.com/security/cve/CVE-2026-56850"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272944 for CVE-2026-56850",
          "url": "https://bugzilla.suse.com/1272944"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56850"
    },
    {
      "cve": "CVE-2026-58039",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58039"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths.\n\nThis can lead to confidentiality impact or bypass of the intended security boundary under affected configurations.\n\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58039",
          "url": "https://www.suse.com/security/cve/CVE-2026-58039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272950 for CVE-2026-58039",
          "url": "https://bugzilla.suse.com/1272950"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-58039"
    },
    {
      "cve": "CVE-2026-58040",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58040"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934).\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58040",
          "url": "https://www.suse.com/security/cve/CVE-2026-58040"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272945 for CVE-2026-58040",
          "url": "https://bugzilla.suse.com/1272945"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-58040"
    },
    {
      "cve": "CVE-2026-58042",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58042"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records.\r\n\r\nRepeated triggering of this condition can lead to denial of service.\r\n\r\nThis vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58042",
          "url": "https://www.suse.com/security/cve/CVE-2026-58042"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272947 for CVE-2026-58042",
          "url": "https://bugzilla.suse.com/1272947"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-58042"
    },
    {
      "cve": "CVE-2026-58043",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58043"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix boundaries.\r\n\r\nUnder `--permission`, an attacker who is granted access to one path can abuse boundary handling to read from or write to paths outside the intended filesystem allowlist.\r\n\r\nThis vulnerability affects Node.js **main**, **22.x**, **24.x**, and **26.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58043",
          "url": "https://www.suse.com/security/cve/CVE-2026-58043"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272943 for CVE-2026-58043",
          "url": "https://bugzilla.suse.com/1272943"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-58043"
    },
    {
      "cve": "CVE-2026-58044",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58044"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers while piping the original body to a reused backend connection.\r\n\r\nNode.js can omit headers beyond `maxHeadersCount` / `maxHeaderPairs` from `req.headers`, `req.rawHeaders`, and `req.headersDistinct`, while still using those omitted headers internally for HTTP message framing. In particular, `Content-Length` can be hidden from userland while the request body is still delivered.\r\n\r\nThis vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58044",
          "url": "https://www.suse.com/security/cve/CVE-2026-58044"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272951 for CVE-2026-58044",
          "url": "https://bugzilla.suse.com/1272951"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-58044"
    },
    {
      "cve": "CVE-2026-58045",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-58045"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchronous `node:zlib` APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected.\r\n\r\nRepeated exploitation of this condition can result in a denial of service.\r\n\r\nThis vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
          "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-58045",
          "url": "https://www.suse.com/security/cve/CVE-2026-58045"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272948 for CVE-2026-58045",
          "url": "https://bugzilla.suse.com/1272948"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6-LTSS:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.s390x",
            "SUSE Linux Enterprise Server 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-devel-22.23.2-150600.13.24.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:nodejs22-docs-22.23.2-150600.13.24.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP6:npm22-22.23.2-150600.13.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-06T11:31:28Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-58045"
    }
  ]
}