CVE-2026-6733
Fixed in a distro release EPSS <1%CVSS 3.7
Impact: Undici's HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can inject an unsolicited HTTP/1.1 response onto an idle socket after a request completes. When the client dispatches the next request on that socket, it associates the injected response with the new request, causing responses to be delivered to the wrong requests. This requires an attacker-controlled or compromised upstream HTTP/1.1 server and keep-alive connection reuse. Patches: Upgrade to undici v6.26.0, v7.28.0 or v8.5.0. Workarounds: Disable keep-alive connection reuse by setting keepAliveTimeout: 0 on the Client or Pool.
Products: undici
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | undici | 6.27.0 |
| npm | undici | 7.28.0 |
| npm | undici | 8.5.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | nodejs | 1:22.23.1-2.el10_2 |
| AlmaLinux 10 | nodejs-devel | 1:22.23.1-2.el10_2 |
| AlmaLinux 10 | nodejs-docs | 1:22.23.1-2.el10_2 |
| AlmaLinux 10 | nodejs-full-i18n | 1:22.23.1-2.el10_2 |
| AlmaLinux 10 | nodejs-libs | 1:22.23.1-2.el10_2 |
| AlmaLinux 10 | nodejs-npm | 1:10.9.8-1.22.23.1.2.el10_2 |
| AlmaLinux 10 | nodejs24 | 1:24.18.0-1.el10_2 |
| AlmaLinux 10 | nodejs24-devel | 1:24.18.0-1.el10_2 |
| AlmaLinux 10 | nodejs24-docs | 1:24.18.0-1.el10_2 |
| AlmaLinux 10 | nodejs24-full-i18n | 1:24.18.0-1.el10_2 |
| AlmaLinux 10 | nodejs24-libs | 1:24.18.0-1.el10_2 |
| AlmaLinux 10 | nodejs24-npm | 1:11.16.0-1.24.18.0.1.el10_2 |
| AlmaLinux 8 | nodejs | 1:22.23.1-1.module_el8.10.0+4231+1bf2f855 |
| AlmaLinux 8 | nodejs | 1:24.18.0-1.module_el8.10.0+4228+2938bc94 |
| AlmaLinux 8 | nodejs-devel | 1:22.23.1-1.module_el8.10.0+4231+1bf2f855 |
| AlmaLinux 8 | nodejs-devel | 1:24.18.0-1.module_el8.10.0+4228+2938bc94 |
| AlmaLinux 8 | nodejs-docs | 1:24.18.0-1.module_el8.10.0+4228+2938bc94 |
| AlmaLinux 8 | nodejs-docs | 1:22.23.1-1.module_el8.10.0+4231+1bf2f855 |
| AlmaLinux 8 | nodejs-full-i18n | 1:24.18.0-1.module_el8.10.0+4228+2938bc94 |
| AlmaLinux 8 | nodejs-full-i18n | 1:22.23.1-1.module_el8.10.0+4231+1bf2f855 |
| AlmaLinux 8 | nodejs-libs | 1:24.18.0-1.module_el8.10.0+4228+2938bc94 |
| AlmaLinux 8 | nodejs-libs | 1:22.23.1-1.module_el8.10.0+4231+1bf2f855 |
| AlmaLinux 8 | nodejs-nodemon | 3.0.1-1.module_el8.10.0+3956+47c9ee9f |
| AlmaLinux 8 | nodejs-nodemon | 3.0.3-1.module_el8.10.0+4061+f8ceeab9 |
| AlmaLinux 8 | nodejs-packaging | 2021.06-6.module_el8.10.0+4086+70facd4a |
| AlmaLinux 8 | nodejs-packaging | 2021.06-6.module_el8.10.0+4158+e796f37f |
| AlmaLinux 8 | nodejs-packaging-bundler | 2021.06-6.module_el8.10.0+4086+70facd4a |
| AlmaLinux 8 | nodejs-packaging-bundler | 2021.06-6.module_el8.10.0+4158+e796f37f |
| AlmaLinux 8 | npm | 1:11.16.0-1.24.18.0.1.module_el8.10.0+4228+2938bc94 |
| AlmaLinux 8 | npm | 1:10.9.8-1.22.23.1.1.module_el8.10.0+4231+1bf2f855 |
| AlmaLinux 8 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.1.module_el8.10.0+4231+1bf2f855 |
| AlmaLinux 8 | v8-13.6-devel | 3:13.6.233.17-1.24.18.0.1.module_el8.10.0+4228+2938bc94 |
| AlmaLinux 9 | nodejs | 1:22.23.1-1.module_el9.8.0+276+8b329b47 |
| AlmaLinux 9 | nodejs | 1:24.18.0-1.module_el9.8.0+277+61fc613e |
| AlmaLinux 9 | nodejs-devel | 1:24.18.0-1.module_el9.8.0+277+61fc613e |
| AlmaLinux 9 | nodejs-devel | 1:22.23.1-1.module_el9.8.0+276+8b329b47 |
| AlmaLinux 9 | nodejs-docs | 1:24.18.0-1.module_el9.8.0+277+61fc613e |
| AlmaLinux 9 | nodejs-docs | 1:22.23.1-1.module_el9.8.0+276+8b329b47 |
| AlmaLinux 9 | nodejs-full-i18n | 1:22.23.1-1.module_el9.8.0+276+8b329b47 |
| AlmaLinux 9 | nodejs-full-i18n | 1:24.18.0-1.module_el9.8.0+277+61fc613e |
| AlmaLinux 9 | nodejs-libs | 1:22.23.1-1.module_el9.8.0+276+8b329b47 |
| AlmaLinux 9 | nodejs-libs | 1:24.18.0-1.module_el9.8.0+277+61fc613e |
| AlmaLinux 9 | nodejs-nodemon | 3.0.1-1.module_el9.7.0+208+fb06c0ab |
| AlmaLinux 9 | nodejs-nodemon | 3.0.3-3.module_el9.7.0+209+ecf6523e |
| AlmaLinux 9 | nodejs-packaging | 2021.06-6.module_el9.7.0+209+ecf6523e |
| AlmaLinux 9 | nodejs-packaging | 2021.06-6.module_el9.7.0+227+12323393 |
| AlmaLinux 9 | nodejs-packaging-bundler | 2021.06-6.module_el9.7.0+227+12323393 |
| AlmaLinux 9 | nodejs-packaging-bundler | 2021.06-6.module_el9.7.0+209+ecf6523e |
| AlmaLinux 9 | npm | 1:11.16.0-1.24.18.0.1.module_el9.8.0+277+61fc613e |
| AlmaLinux 9 | npm | 1:10.9.8-1.22.23.1.1.module_el9.8.0+276+8b329b47 |
| AlmaLinux 9 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.1.module_el9.8.0+276+8b329b47 |
| AlmaLinux 9 | v8-13.6-devel | 3:13.6.233.17-1.24.18.0.1.module_el9.8.0+277+61fc613e |
| Chainguard | actions-runner | 2.335.1-r1 |
| Chainguard | code-server | 4.125.0-r2 |
| Chainguard | commercial-gitlab-rails-ee-19.1 | 19.1.7-r3 |
| Chainguard | commercial-gitlab-rails-ee-19.2 | 19.2.7-r1 |
| Chainguard | commercial-gitlab-rails-ee-19.3 | 19.3.3-r1 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.1 | 19.1.9-r0 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.2 | 19.2.7-r1 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.3 | 19.3.3-r1 |
| Chainguard | gemini-cli | 0.49.0-r4 |
| Chainguard | haraka | 3.3.1-r1 |
| Chainguard | kibana-8.19 | 8.19.16-r6 |
| Chainguard | kibana-8.19-bitnami | 8.19.16-r6 |
| Chainguard | kibana-8.19-iamguarded | 8.19.16-r6 |
| Chainguard | kibana-9.1 | 9.1.10-r21 |
| Chainguard | kibana-9.1-iamguarded | 9.1.10-r21 |
| Chainguard | kibana-9.2 | 9.2.8-r9 |
| Chainguard | kibana-9.2-iamguarded | 9.2.8-r9 |
| Chainguard | kibana-9.3 | 9.3.5-r4 |
| Chainguard | kibana-9.3-iamguarded | 9.3.5-r4 |
| Chainguard | kibana-9.4 | 9.4.2-r5 |
| Chainguard | kibana-9.4-iamguarded | 9.4.2-r5 |
| Chainguard | node-gyp | 13.0.0-r1 |
| Chainguard | npm | 11.17.0-r1 |
| Chainguard | pelias-api | 7.8.0-r4 |
| Chainguard | prism | 5.15.11-r3 |
| Chainguard | py3.10-captum | 0.9.0-r1 |
| Chainguard | py3.11-captum | 0.9.0-r1 |
| Chainguard | py3.12-captum | 0.9.0-r1 |
| Chainguard | py3.13-captum | 0.9.0-r1 |
| Chainguard | renovate | 43.247.0-r0 |
| Chainguard | renovate | 43.249.5-r2 |
| Chainguard | saf | 1.6.0-r2 |
| Chainguard | vitess-24 | 24.0.2-r1 |
| Chainguard | vitess-24-compat | 24.0.3-r7 |
| Debian 12 | node-undici | no fix |
| Debian 13 | node-undici | no fix |
| Debian 14 | node-undici | 8.5.0+dfsg+~cs3.2.0-1 |
| Red Hat Enterprise Linux 10.2 | nodejs | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-debuginfo | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-devel | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-docs | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-full-i18n | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-libs | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-libs-debuginfo | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs-npm | 1:10.9.8-1.22.23.1.2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs22 | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs22-debuginfo | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs22-debugsource | 1:22.23.1-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24 | 1:24.18.0-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-debuginfo | 1:24.18.0-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-debugsource | 1:24.18.0-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-devel | 1:24.18.0-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-docs | 1:24.18.0-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-full-i18n | 1:24.18.0-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-libs | 1:24.18.0-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-libs-debuginfo | 1:24.18.0-1.el10_2 |
| Red Hat Enterprise Linux 10.2 | nodejs24-npm | 1:11.16.0-1.24.18.0.1.el10_2 |
| Red Hat Enterprise Linux 8 | nodejs | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | nodejs-debuginfo | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | nodejs-debuginfo | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-debugsource | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | nodejs-debugsource | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-devel | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | nodejs-devel | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-docs | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | nodejs-docs | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-full-i18n | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | nodejs-full-i18n | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-libs | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-libs | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | nodejs-libs-debuginfo | 1:22.23.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-libs-debuginfo | 1:24.18.0-1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | nodejs-nodemon | 0:3.0.3-1.module+el8.10.0+24190+49a46c75 |
| Red Hat Enterprise Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+24190+49a46c75 |
| Red Hat Enterprise Linux 8 | nodejs-packaging-bundler | 0:2021.06-6.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | nodejs-packaging-bundler | 0:2021.06-6.module+el8.10.0+24190+49a46c75 |
| Red Hat Enterprise Linux 8 | npm | 1:10.9.8-1.22.23.1.1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | npm | 1:11.16.0-1.24.18.0.1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 8 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.1.module+el8.10.0+24500+8eb51621 |
| Red Hat Enterprise Linux 8 | v8-13.6-devel | 3:13.6.233.17-1.24.18.0.1.module+el8.10.0+24481+7a71fac8 |
| Red Hat Enterprise Linux 9 | nodejs | 1:22.23.1-1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | nodejs | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | nodejs-debuginfo | 1:22.23.1-1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | nodejs-debuginfo | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | nodejs-debugsource | 1:22.23.1-1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | nodejs-debugsource | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | nodejs-devel | 1:22.23.1-1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | nodejs-devel | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | nodejs-docs | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | nodejs-docs | 1:22.23.1-1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | nodejs-full-i18n | 1:22.23.1-1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | nodejs-full-i18n | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | nodejs-libs | 1:22.23.1-1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | nodejs-libs | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | nodejs-libs-debuginfo | 1:24.18.0-1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | nodejs-libs-debuginfo | 1:22.23.1-1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | nodejs-nodemon | 0:3.0.3-3.module+el9.8.0+24355+35d95b59 |
| Red Hat Enterprise Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.8.0+24156+bb41d456 |
| Red Hat Enterprise Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.8.0+24156+bb41d456 |
| Red Hat Enterprise Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.8.0+24355+35d95b59 |
| Red Hat Enterprise Linux 9 | nodejs-packaging-bundler | 0:2021.06-6.module+el9.8.0+24156+bb41d456 |
| Red Hat Enterprise Linux 9 | nodejs-packaging-bundler | 0:2021.06-6.module+el9.8.0+24355+35d95b59 |
| Red Hat Enterprise Linux 9 | npm | 1:10.9.8-1.22.23.1.1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | npm | 1:11.16.0-1.24.18.0.1.module+el9.8.0+24456+b244c3b4 |
| Red Hat Enterprise Linux 9 | v8-12.4-devel | 3:12.4.254.21-1.22.23.1.1.module+el9.8.0+24457+996af7aa |
| Red Hat Enterprise Linux 9 | v8-13.6-devel | 3:13.6.233.17-1.24.18.0.1.module+el9.8.0+24456+b244c3b4 |
| Red Hat hummingbird 1 | nodejs24 | 0:24.18.0-0.3.hum1 |
| Red Hat hummingbird 1 | nodejs24-bin | 0:24.18.0-0.3.hum1 |
| Red Hat hummingbird 1 | nodejs24-devel | 0:24.18.0-0.3.hum1 |
| Red Hat hummingbird 1 | nodejs24-docs | 0:24.18.0-0.3.hum1 |
| Red Hat hummingbird 1 | nodejs24-full-i18n | 0:24.18.0-0.3.hum1 |
| Red Hat hummingbird 1 | nodejs24-libs | 0:24.18.0-0.3.hum1 |
| Red Hat hummingbird 1 | nodejs24-npm | 0:11.16.0-1.24.18.0.0.3.hum1 |
| Red Hat hummingbird 1 | nodejs24-npm-bin | 0:24.18.0-0.3.hum1 |
| Red Hat hummingbird 1 | nodejs26 | 0:26.5.0-1.3.hum1 |
| Red Hat hummingbird 1 | nodejs26-bin | 0:26.5.0-1.3.hum1 |
| Red Hat hummingbird 1 | nodejs26-devel | 0:26.5.0-1.3.hum1 |
| Red Hat hummingbird 1 | nodejs26-docs | 0:26.5.0-1.3.hum1 |
| Red Hat hummingbird 1 | nodejs26-full-i18n | 0:26.5.0-1.3.hum1 |
| Red Hat hummingbird 1 | nodejs26-libs | 0:26.5.0-1.3.hum1 |
| Red Hat hummingbird 1 | nodejs26-npm | 0:11.17.0-1.26.5.0.1.3.hum1 |
| Red Hat hummingbird 1 | nodejs26-npm-bin | 0:26.5.0-1.3.hum1 |
| Red Hat hummingbird 1 | v8-13.6-devel | 0:13.6.233.17-1.24.18.0.0.3.hum1 |
| Rocky Linux 10 | nodejs22 | 1:22.23.1-2.el10_2 |
| Rocky Linux 10 | nodejs24 | 1:24.18.0-1.el10_2 |
| Rocky Linux 8 | nodejs | 1:24.18.0-1.module+el8.10.0+40252+a58646bc |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1935+d3cbe60f |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1666+930e28e8 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1989+e60144d9 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1988+437f3d23 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1924+614dc87f |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1823+b5789597 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1824+532140ee |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.10.0+1667+4a788d89 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.1-1.module+el8.9.0+1760+903d54b9 |
| Rocky Linux 8 | nodejs-nodemon | 0:3.0.3-1.module+el8.10.0+2084+ab509703 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+40171+8fa9c325 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+40048+6d99f608 |
| Rocky Linux 8 | nodejs-packaging | 0:2021.06-6.module+el8.10.0+40172+38f6fdd1 |
| Rocky Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.7.0+40022+9ecc286c |
| Rocky Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.7.0+40165+d075e3f2 |
| Rocky Linux 9 | nodejs-nodemon | 0:3.0.1-1.module+el9.7.0+40153+4d595597 |
| Rocky Linux 9 | nodejs-nodemon | 0:3.0.3-3.module+el9.7.0+40025+0e0cf6b2 |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.7.0+40052+e32ea525 |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.7.0+40165+d075e3f2 |
| Rocky Linux 9 | nodejs-packaging | 0:2021.06-6.module+el9.7.0+40153+4d595597 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | nodejs16 | 16.20.2-150400.3.42.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | nodejs18 | 18.20.8-150400.9.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | nodejs16 | 16.20.2-150400.3.42.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | nodejs18 | 18.20.8-150400.9.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | nodejs18 | 18.20.8-150400.9.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | nodejs20 | 20.20.2-150500.11.30.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | nodejs18 | 18.20.8-150400.9.39.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | nodejs20 | 20.20.2-150500.11.30.1 |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP7 | nodejs22 | 22.23.0-150700.3.12.1 |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP7 | nodejs24 | 24.17.0-150700.15.11.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | nodejs18 | 18.20.8-8.44.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | nodejs16 | 16.20.2-150400.3.42.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | nodejs18 | 18.20.8-150400.9.39.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | nodejs18 | 18.20.8-150400.9.39.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | nodejs20 | 20.20.2-150500.11.30.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | nodejs20 | 20.20.2-150600.3.21.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | nodejs22 | 22.23.0-150600.13.18.1 |
| SUSE Linux Enterprise Server 16.0 | nodejs22 | 22.23.0-160000.1.1 |
| SUSE Linux Enterprise Server 16.0 | nodejs24 | 24.18.0-160000.1.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | nodejs18 | 18.20.8-8.44.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | nodejs16 | 16.20.2-150400.3.42.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | nodejs18 | 18.20.8-150400.9.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | nodejs18 | 18.20.8-150400.9.39.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | nodejs20 | 20.20.2-150500.11.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | nodejs20 | 20.20.2-150600.3.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | nodejs22 | 22.23.0-150600.13.18.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | nodejs22 | 22.23.0-160000.1.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | nodejs24 | 24.18.0-160000.1.1 |
| Ubuntu 24.04 LTS | node-undici | no fix |
| Ubuntu 25.10 | node-undici | no fix |
| Ubuntu 26.04 LTS | node-undici | no fix |
| Ubuntu 26.10 | node-undici | no fix |
| Wolfi | code-server | 4.125.0-r2 |
| Wolfi | node-gyp | 13.0.0-r1 |
| Wolfi | npm | 11.17.0-r1 |
| Wolfi | prism | 5.15.11-r3 |
| Wolfi | renovate | 43.247.0-r0 |
| Wolfi | renovate | 43.249.5-r2 |
| Wolfi | saf | 1.6.0-r2 |
| Wolfi | vitess-24 | 24.0.2-r1 |
| Wolfi | vitess-24-compat | 24.0.3-r7 |
| openSUSE Leap 16.0 | nodejs22 | 22.23.0-160000.1.1 |
| openSUSE Leap 16.0 | nodejs24 | 24.18.0-160000.1.1 |
| openSUSE Tumbleweed | nodejs24 | 24.17.0-1.1 |