[CLSA-2026:1777541472] alt-nodejs16-nodejs: Fix of CVE-2025-22150
Type:
security
Severity:
Moderate
Release date:
2026-04-30 22:19:08 UTC
Description:
- CVE-2025-22150: undici uses predictable Math.random() for multipart/form-data boundary, allowing attackers to tamper with backend requests under certain conditions
Updated packages:
  • alt-nodejs16-nodejs-16.20.2-17.el9.x86_64.rpm
    sha:18f0caa2a82f771e56a0b1596ad5838ec97e6542efb35842bc9de83469ad7818
  • alt-nodejs16-nodejs-devel-16.20.2-17.el9.x86_64.rpm
    sha:14d8cb6bd73d2257bd608a8c72d0ae40fa31d6ba0b67ed7b58f8e960fa6bf56e
  • alt-nodejs16-nodejs-docs-16.20.2-17.el9.noarch.rpm
    sha:e70d9f6e6a7395226afa997b0bb49cdd6aafd0c8ea5246f49228872949adc045
  • alt-nodejs16-npm-8.19.4-16.20.2.17.el9.x86_64.rpm
    sha:045e58c41e61ffc915aed0659c39a308f1566d6b3b916807c6017ada43509532
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.