Skip to content

node and pnpm security updates#9342

Merged
EbonJaeger merged 3 commits into
getsolus:mainfrom
Jaredy899:node
Jun 18, 2026
Merged

node and pnpm security updates#9342
EbonJaeger merged 3 commits into
getsolus:mainfrom
Jaredy899:node

Conversation

@Jaredy899

@Jaredy899 Jaredy899 commented Jun 18, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Security updates for nodejs-22, nodejs-24, and pnpm.

Security
Includes fixes for:

  • CVE-2026-48618
  • CVE-2026-48933
  • CVE-2026-48937
  • CVE-2026-48930
  • CVE-2026-48619
  • CVE-2026-48615
  • CVE-2026-48934
  • CVE-2026-48928
  • CVE-2026-48617
  • CVE-2026-48931
  • CVE-2026-48935

Security
Includes fixes for:

  • CVE-2026-48618
  • CVE-2026-48933
  • CVE-2026-48615
  • CVE-2026-48619
  • CVE-2026-48928
  • CVE-2026-48930
  • CVE-2026-48934
  • CVE-2026-48937
  • CVE-2026-48617
  • CVE-2026-48931
  • CVE-2026-48935

Security
Includes fixes for:

  • CVE-2026-55180

Test Plan

node hello.js, pnpm install on project.

Checklist

  • Package was built and tested against unstable
  • This change could gainfully be listed in the weekly sync notes once merged
  • I agree to license this contribution and all my previous contributions under the licensing terms in LICENSE.md and have the power and authority to grant those licenses.

**Summary**
- Release notes can be found [here](https://nodejs.org/en/blog/release/v22.23.0).

**Security**
Includes fixes for:
- CVE-2026-48618
- CVE-2026-48933
- CVE-2026-48937
- CVE-2026-48930
- CVE-2026-48619
- CVE-2026-48615
- CVE-2026-48934
- CVE-2026-48928
- CVE-2026-48617
- CVE-2026-48931
- CVE-2026-48935

Signed-off-by: Jared Cervantes <jared@jaredcervantes.com>
**Summary**
- Release notes can be found [here](https://nodejs.org/en/blog/release/v24.17.0).

**Security**
Includes fixes for:
- CVE-2026-48618
- CVE-2026-48933
- CVE-2026-48615
- CVE-2026-48619
- CVE-2026-48928
- CVE-2026-48930
- CVE-2026-48934
- CVE-2026-48937
- CVE-2026-48617
- CVE-2026-48931
- CVE-2026-48935

Signed-off-by: Jared Cervantes <jared@jaredcervantes.com>
**Summary**
- Release notes can be found [here](https://github.com/pnpm/pnpm/releases).

**Security**
Includes fixes for:
- CVE-2026-55180

Signed-off-by: Jared Cervantes <jared@jaredcervantes.com>
@github-project-automation github-project-automation Bot moved this to Triage in Solus Jun 18, 2026
@EbonJaeger EbonJaeger added the Security Security issue label Jun 18, 2026

@EbonJaeger EbonJaeger left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks!

@EbonJaeger EbonJaeger merged commit d578fe8 into getsolus:main Jun 18, 2026
1 check passed
@github-project-automation github-project-automation Bot moved this from Triage to Done in Solus Jun 18, 2026
@Jaredy899 Jaredy899 deleted the node branch June 18, 2026 22:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Security Security issue

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants