[CLSA-2026:1777541089] alt-nodejs16-nodejs: Fix of CVE-2025-22150
Type:
security
Severity:
Moderate
Release date:
2026-04-30 22:16:18 UTC
Description:
- CVE-2025-22150: undici uses predictable Math.random() for multipart/form-data boundary, allowing attackers to tamper with backend requests under certain conditions
Updated packages:
  • alt-nodejs16-nodejs-16.20.2-17.el8.x86_64.rpm
    sha:5385fe649b22a4b3e4915a689eb1fba5fc8d67b74901c77ee729caa0ef471bf5
  • alt-nodejs16-nodejs-devel-16.20.2-17.el8.x86_64.rpm
    sha:d00cb01b4d5eb26d6c54bd96c3f243e80eaa52927ed8eb6b536e3fd55f643dee
  • alt-nodejs16-nodejs-docs-16.20.2-17.el8.noarch.rpm
    sha:03c4c172d048680fe832dab965e3df16b1746c36e1f59f695fa59d701a7ec9fd
  • alt-nodejs16-npm-8.19.4-16.20.2.17.el8.x86_64.rpm
    sha:aa86dd82e881043bb82a9dcf1322ea8b08da9fb8d324969923d19d5a6fe3c813
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.