[CLSA-2026:1792427569] alt-nodejs14-nodejs: Fix of CVE-2026-58044
Type:
security
Severity:
Moderate
Release date:
2026-10-19 16:33:00 UTC
Description:
- CVE-2026-58044: enforce maxHeadersCount in the HTTP parser, so a request carrying more header pairs than configured is rejected instead of silently truncated
CVEs fixed:
Updated packages:
  • alt-nodejs14-nodejs-14.21.3-36.el8.x86_64.rpm
    sha:85e85b4c4567600ccb6a64707a6009577525203a01e47022e6eb3c937f9eced1
  • alt-nodejs14-nodejs-devel-14.21.3-36.el8.x86_64.rpm
    sha:99e6d1f77bd62e473a2b8a5526acdd4a756d2ad4a44d1e6b703851a53175a659
  • alt-nodejs14-nodejs-docs-14.21.3-36.el8.noarch.rpm
    sha:64bb0c9cb1a0636ba950b6be01f822c45ca0781fc3d5efc52867bddf2021a5f0
  • alt-nodejs14-npm-6.14.18-14.21.3.36.el8.x86_64.rpm
    sha:d53fb4a5ee33de24239716e0b6b8063eb46142dcd1261239fac9ede672d377a8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.