{
  "schema_version": "1.7.0",
  "id": "RHSA-2026:84657",
  "related": [],
  "upstream": [
    "CVE-2026-87018",
    "CVE-2026-87029",
    "CVE-2026-102276",
    "CVE-2026-109383",
    "CVE-2026-109829",
    "CVE-2026-109841",
    "CVE-2026-109869",
    "CVE-2026-109924",
    "CVE-2026-109932"
  ],
  "published": "2026-10-20T10:17:41Z",
  "modified": "2026-10-20T10:17:41Z",
  "summary": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
    }
  ],
  "affected": [
    {
      "package": {
        "name": "nodejs26",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/nodejs26"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:26.11.1-0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "nodejs26-bin",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/nodejs26-bin"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:26.11.1-0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "nodejs26-devel",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/nodejs26-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:26.11.1-0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "nodejs26-docs",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/nodejs26-docs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:26.11.1-0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "nodejs26-full-i18n",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/nodejs26-full-i18n"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:26.11.1-0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "nodejs26-libs",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/nodejs26-libs"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:26.11.1-0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "nodejs26-npm",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/nodejs26-npm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:11.20.0-1.26.11.1.0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "nodejs26-npm-bin",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/nodejs26-npm-bin"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:26.11.1-0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "name": "v8-14.6-devel",
        "ecosystem": "Red Hat:hummingbird:1",
        "purl": "pkg:rpm/redhat/v8-14.6-devel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:14.6.202.34-1.26.11.1.0.4.hum1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:84657"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-102276"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-109383"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-109829"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-109841"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-109869"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-109924"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-109932"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-87018"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-87029"
    },
    {
      "type": "ARTICLE",
      "url": "https://access.redhat.com/security/updates/classification/"
    },
    {
      "type": "ARTICLE",
      "url": "https://images.redhat.com/"
    },
    {
      "type": "ADVISORY",
      "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_84657.json"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553677"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87018"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87018"
    },
    {
      "type": "ARTICLE",
      "url": "https://cna.openjsf.org/security-advisories.html"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/security/advisories/GHSA-qrxm-fqhp-jwvm"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553726"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-87029"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87029"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/security/advisories/GHSA-55wc-3pg8-jfw6"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542707"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102276"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102276"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/juliangruber/brace-expansion/commit/0bcbfc0a5928c3073d48f42999d1ce4fc1c42fbc"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/juliangruber/brace-expansion/commit/316359e6019c39b3254c8ba8e25dc586a480652c"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/juliangruber/brace-expansion/commit/5171e681c0922b7ae8bfaf9a331e309107be6edc"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/juliangruber/brace-expansion/commit/6735c94873ca570bcdd6a0690033bdd3126379d3"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-6j4f-fj2g-mc7p"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553678"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109383"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109383"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/commit/f75eac00ac17"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/security/advisories/GHSA-2m5v-pch6-74hx"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553679"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109829"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109829"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/commit/26c2bfb3def0"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/security/advisories/GHSA-4w7w-5xrc-9h26"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553669"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109841"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109841"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/commit/4f7ef6806e53"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/security/advisories/GHSA-f72v-6w45-q472"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553656"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109869"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109869"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/commit/b5084c7dc239"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/security/advisories/GHSA-xjj6-f33q-929c"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553663"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109924"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109924"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/commit/789ef26461c"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/security/advisories/GHSA-4qv8-2p9j-2685"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553687"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109932"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-109932"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/nodejs/undici/security/advisories/GHSA-9fm3-97px-rjf6"
    }
  ]
}