18.20.6 is the current release from upstream, containing fix for CVE-2025-23085 and security update for the bundled undici (CVE-2025-22150). Please update. --- Upstream release monitoring was disabled for this package. It is enabled now; feel free to close this issue as duplicate if the service wakes up. Reproducible: Always
FEDORA-2025-1389b1c3bb (nodejs18-18.20.6-1.fc42) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2025-1389b1c3bb
FEDORA-2025-1389b1c3bb (nodejs18-18.20.6-1.fc42) has been pushed to the Fedora 42 stable repository. If problem still persists, please make note of it in this bug report.