Rocky Linux administrators should install two important security patches for their Node.js environments immediately. One patch covers version 24 on system eight while impacting modules like nodejs-nodemon and packaging tools. Users on the newer platform also need a separate update for version twenty of the software though. Detailed severity ratings for these vulnerabilities are available through the Common Vulnerability Scoring System linked to each CVE list item.

RLSA-2026:7670: Important: nodejs:24 security update
RLSA-2026:7896: Important: nodejs:20 security update

RLSA-2026:7670: Important: nodejs:24 security update

An update is available for nodejs-nodemon, module.nodejs-packaging, module.nodejs-nodemon, nodejs-packaging.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7670: Important: nodejs:24 security update

RLSA-2026:7896: Important: nodejs:20 security update

An update is available for nodejs-nodemon, module.nodejs-packaging, module.nodejs-nodemon, nodejs-packaging.
This update affects Rocky Linux 9.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list

RLSA-2026:7896: Important: nodejs:20 security update