The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20261-1 advisory.

    Changes in openQA:

    - Update to version 5.1771422749.560a3b26:
      * fix(mcp): set navbar check expression to read-only
      * feat: support inverted result filters in /tests/overview
      * fix(test): Enable helm install-chart test again
      * git subrepo pull (merge) --force external/os-autoinst-common
      * feat: Make allowed hosts for SCENARIO_DEFINITIONS_YAML_FILE configurable
      * test: Consider everything under `lib/OpenQA/Shared/` covered
      * fix: Provide specific error message if job was removed `enqueue__track`
      * refactor: Remove useless error message in `enqueue_and_keep_track`
      * test: Cover case of successful executing in `enqueue_and_keep_track`
      * refactor: Simplify error handling of `enqueue_and_keep_track`
      * test: Cover error handling of `enqueue_and_keep_track`
      * test: Consider shared session controller fully covered
      * refactor: Avoid duplications in sessions controller
      * refactor: Use signatures in session controller code
      * test: Cover error handling in case of a bad CRSF token
      * test: Cover test route for session
      * fix(worker): reject jobs explicitly when worker is stopping
      * feat: Remove workaround for codecov and gpg
      * feat: Switch to Leap 16 in Helm charts
      * feat: Switch to Leap 16.0 in openqa_data container
      * feat: Replace all Leap 15.6 with 16.0 in docs and scripts
      * test: Cover showing special image when backend has terminated
      * fix: Use new apachectl command
      * Update openQA containers to Leap 16.0
      * test: Extend tests for controller handling live view
      * refactor: Move throttling into its own function
      * feat(throttling): throttle jobs resources based on parameters size
      * refactor: Avoid repeated use of `$t->app->minion` in gru tasks tests
      * feat: Allow archiving jobs with infinite important storage durations
      * feat: Flag jobs without results as archived for consistency
      * feat: Remove one corner case preventing jobs from being archived

    - Update to version 5.1770718745.ce2072d3:
      * feat(ui): use clickable test overview summary counts for quick filtering
      * build(Makefile): fix uninterruptable tests
      * docs: Mention caveats of `_cleanup_max_free_percentage` setting
      * test(25-cache-service): fix race conditions
      * test(ui/21-admin-needles): properly wait for modal dialog and deletion
      * test(ui/13-admin): properly wait for API key deletion
      * test(40-openqa-clone-job): properly isolate from system config
      * test(15-asset): bump timeout to current runtime
      * chore: fix CVE-2026-25547 (boo#1257852) by overriding minimatch
      * build(deps-dev): bump @eslint from 9.36.0 to 9.38.0
      * fix(eslint): correct style to be eslint-9.38 compliant
      * build(deps-dev): bump @eslint-community/regexpp from 4.12.1 to 4.12.2
      * build(deps-dev): bump @eslint/config-array from 0.21.0 to 0.21.1
      * build(deps-dev): bump @eslint/object-schema from 2.1.6 to 2.1.7
      * refactor: Improve variable names in function to determine expired jobs
      * test: Improve name of subtest for archiving
      * test: Verify that archiving works regardless of logs/results present
      * Dependency cron 2026-02-06
      * Bump js-yaml from 4.1.0 to 4.1.1
      * build(deps): bump ace-builds from 1.43.3 to 1.43.4

    - Update to version 5.1770308102.12dfd0e4:
      * fix: Configure sudoers correctly in Leap 16
      * Also use devel:openQA/16.0 in dependency bot workflow
      * test: Consider all controller code covered
      * refactor: Remove unused group connect endpoints
      * test: Cover `openqa_jobs_by_worker` field of InfluxDB endpoint
      * test: Cover all cases of search of audit log table
      * refactor: Simplify function to render audit log index page
      * test: Add test for `eventid` parameter of audit log page
      * test: Cover remaining lines of `Asset.pm`

    - Update to version 5.1769644379.ef069e9d:

    Changes in os-autoinst:

    - Update to version 5.1771353921.c8005c9:
      * git subrepo pull (merge) --force external/os-autoinst-common
      * style: Fix crop.py style issues
      * workaround: Remove get_mempolicy warning from qemu-img output
      * parse_extra_log: Allow passing additional args to upload_logs
      * refactor: Distinguish tests by the script path in `loadtest`
      * refactor: Simplify approach for avoiding redefine warnings

    - Update to version 5.1770715824.6a80a85:
      * style: Fix crop.py style issues
      * workaround: Remove get_mempolicy warning from qemu-img output
      * parse_extra_log: Allow passing additional args to upload_logs
      * refactor: Distinguish tests by the script path in `loadtest`
      * refactor: Simplify approach for avoiding redefine warnings
      * test: Allow running tests with `Test::Warnings<0.033`
      * test: Format test of `loadtestdir` in a more compact way

    - Update to version 5.1770127521.c249fe9:
      * refactor: Distinguish tests by the script path in `loadtest`
      * refactor: Simplify approach for avoiding redefine warnings
      * test: Allow running tests with `Test::Warnings<0.033`
      * test: Format test of `loadtestdir` in a more compact way
      * test: Use `ENABLE_MODERN_PERL_FEATURES=1` in test suite
      * feat: Allow enabling strict/warnings/signatures globally
      * fix: Improve wrong comment about enablement of modern Perl features

    Changes in openQA-devel-container:

    - Update to version 5.1771422749.560a3b26b:
      * Update to latest openQA version

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:7123 advisory.

    * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)

    * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)

    * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions     (CVE-2026-27904)

    * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate     decompression (CVE-2026-1526)

    * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter     (CVE-2026-2229)

    * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers     (CVE-2026-1525)

    * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)

    * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination     (CVE-2026-27135)

    * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-7080 advisory.

    - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
    - patch for npm/braces CVE-2026-25547

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:7350 advisory.

    * nodejs: Nodejs denial of service (CVE-2026-21637)

    * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)

    * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)

    * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581)

    * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527)

    * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate     decompression (CVE-2026-1526)

    * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter     (CVE-2026-2229)

    * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers     (CVE-2026-1525)

    * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)

    * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination     (CVE-2026-27135)

    * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing     (CVE-2026-21712)

    * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)

    * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read     restrictions (CVE-2026-21715)

    * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership     via incomplete security fix. (CVE-2026-21716)

    * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission     checks (CVE-2026-21711)

    * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713)

    * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames     (CVE-2026-21714)

    * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash     collisions (CVE-2026-21717)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7983 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)

    * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)

    * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions     (CVE-2026-27904)

    * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate     decompression (CVE-2026-1526)

    * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter     (CVE-2026-2229)

    * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers     (CVE-2026-1525)

    * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)

    * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination     (CVE-2026-27135)

    * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-7350 advisory.

    nodejs     [1:24.14.1-2]
    - Update bundled nghttp2 to 1.68.1

    [1:24.14.1-1]
    - Update to version 24.14.1

    nodejs-nodemon     [3.0.3-3]
    - Keep BR on just npm

    [3.0.3-2]
    - Fix BR for nodejs-npm

    nodejs-packaging     [2021.06-6]
    - Properly handle @group/package deps in nodejs-symlink-deps       Resolves: RHEL-121581

    [2021.06-5]
    - nodejs.req to properly detect bundled deps

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-7302 advisory.

    - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
    - patch for npm/braces CVE-2026-25547       Resolves: RHEL-163369       Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904     CVE-2026-26996 CVE-2026-25547

    nodejs-nodemon
    - Resolves: CVE-2022-25883
    - Resolves: CVE-2021-35065
    - Rebase to 2.0.20       Resolves: CVE-2022-3517
    - Resolves CVE-2020-28469

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7350 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * nodejs: Nodejs denial of service (CVE-2026-21637)

    * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)

    * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)

    * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581)

    * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527)

    * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate     decompression (CVE-2026-1526)

    * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter     (CVE-2026-2229)

    * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers     (CVE-2026-1525)

    * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)

    * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination     (CVE-2026-27135)

    * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing     (CVE-2026-21712)

    * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)

    * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read     restrictions (CVE-2026-21715)

    * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership     via incomplete security fix. (CVE-2026-21716)

    * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket permission     checks (CVE-2026-21711)

    * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713)

    * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames     (CVE-2026-21714)

    * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash     collisions (CVE-2026-21717)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1008-1 advisory.

    golang-github-prometheus-alertmanager, golang-github-prometheus-node_exporter:

    - Internal changes to fix build issues with no impact for customers

    golang-github-prometheus-prometheus:

    - Security issues fixed:

      * CVE-2026-27606: Fixed arbitrary file write via path traversal in rollup (bsc#1258893)
      * CVE-2026-25547: Fixed unbounded brace range expansion leading to excessive CPU and memory consumption     (bsc#1257841)
      * CVE-2026-1615, CVE-2025-61140 The old web UI is no longer built due to security issues (bsc#1257897,     bsc#1257442)
      * CVE-2025-13465: Bump lodash package to version 4.17.23 to fix prototype pollution vulnerability     (bsc#1257329)
      * CVE-2025-12816: Interpretation conflict vulnerability allowing bypassing cryptographic verifications     (bsc#1255588)

    - Version update from 2.53.4 to 3.5.0 with the following highlighted changes (jsc#PED-13824):

      * Modernized Interface: Introduced a brand-new UI
      * Enhanced Cloud and Auth: Added unified AWS service discovery (EC2, ECS, Lightsail) and Azure Workload     Identity support         for more secure, native cloudauthentication.
      * Performance Standards: Fully integrated OpenTelemetry (OTLP) ingestion and moved Native Histograms     from experimental         to a stable feature.
      * Advanced Data Export: Rolled out Remote Write 2.0, offering better performance and metadata handling     when sending         data to external systems.
      * Query Power: Added new PromQL functions (like first_over_time and last_over_time) and optimization for     grouping         operations.
      * Better Visibility: The UI now displays detailed relabeling steps, scrape intervals, and timeouts,     making it easier         to troubleshoot why targets aren't reporting correctly.
      * Critical Fixes: Resolved significant memory leaks related to query logging and fixed bugs where     targets were         accidentally being scraped multiple times.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:7123 advisory.

    * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)
      * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)
      * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions     (CVE-2026-27904)
      * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate     decompression (CVE-2026-1526)
      * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter     (CVE-2026-2229)
      * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers     (CVE-2026-1525)
      * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)
      * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination     (CVE-2026-27135)
      * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:7350 advisory.

    * nodejs: Nodejs denial of service (CVE-2026-21637)
      * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion     (CVE-2026-25547)
      * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)
      * undici: Undici: Denial of Service due to uncontrolled resource consumption (CVE-2026-2581)
      * undici: Undici: HTTP header injection and request smuggling vulnerability (CVE-2026-1527)
      * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate     decompression (CVE-2026-1526)
      * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter     (CVE-2026-2229)
      * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers     (CVE-2026-1525)
      * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)
      * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination     (CVE-2026-27135)
      * Node.js: Node.js: Denial of Service via malformed Internationalized Domain Name processing     (CVE-2026-21712)
      * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)
      * Node.js: Node.js: Information disclosure due to `fs.realpathSync.native()` bypassing filesystem read     restrictions (CVE-2026-21715)
      * nodejs: Node.js: Permission bypass allows unauthorized modification of file permissions and ownership     via incomplete security fix. (CVE-2026-21716)
      * Node.js: Node.js: Unauthorized inter-process communication due to missing Unix Domain Socket     permission checks (CVE-2026-21711)
      * Node.js: Node.js: Information disclosure via timing oracle in HMAC verification (CVE-2026-21713)
      * Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames     (CVE-2026-21714)
      * nodejs: v8: Node.js: Denial of Service via V8 string hashing mechanism due to predictable hash     collisions (CVE-2026-21717)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:7302 advisory.

    Node.js is a software development platform for building fast and scalable network applications in the     JavaScript programming language.

    Security Fix(es):

    * brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion (CVE-2026-25547)

    * minimatch: minimatch: Denial of Service via specially crafted glob patterns (CVE-2026-26996)

    * minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions     (CVE-2026-27904)

    * undici: undici: Denial of Service via unbounded memory consumption during WebSocket permessage-deflate     decompression (CVE-2026-1526)

    * undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameter     (CVE-2026-2229)

    * undici: Undici: HTTP Request Smuggling and Denial of Service due to duplicate Content-Length headers     (CVE-2026-1525)

    * undici: undici: Denial of Service via crafted WebSocket frame with large length (CVE-2026-1528)

    * nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination     (CVE-2026-27135)

    * Node.js: Node.js: Denial of Service due to crafted HTTP `__proto__` header (CVE-2026-21710)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
300098	openSUSE 16 Security Update : openQA, os-autoinst, openQA-devel-container (openSUSE-SU-2026:20261-1)	Nessus	SuSE Local Security Checks	2026/2/28	2026/2/28	critical
305627	RockyLinux 8 : nodejs:22 (RLSA-2026:7123)	Nessus	Rocky Linux Local Security Checks	2026/4/8	2026/4/16	critical
305784	Oracle Linux 10 : nodejs22 (ELSA-2026-7080)	Nessus	Oracle Linux Local Security Checks	2026/4/9	2026/4/9	critical
305802	RockyLinux 9 : nodejs:24 (RLSA-2026:7350)	Nessus	Rocky Linux Local Security Checks	2026/4/9	2026/4/15	critical
306402	RHEL 9 : nodejs:22 (RHSA-2026:7983)	Nessus	Red Hat Local Security Checks	2026/4/14	2026/4/14	critical
307038	Oracle Linux 9 : nodejs:24 (ELSA-2026-7350)	Nessus	Oracle Linux Local Security Checks	2026/4/17	2026/4/17	critical
307040	Oracle Linux 9 : nodejs:22 (ELSA-2026-7302)	Nessus	Oracle Linux Local Security Checks	2026/4/17	2026/4/17	critical
305798	RHEL 9 : nodejs:24 (RHSA-2026:7350)	Nessus	Red Hat Local Security Checks	2026/4/9	2026/4/9	critical
303785	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : Prometheus (SUSE-SU-2026:1008-1)	Nessus	SuSE Local Security Checks	2026/3/26	2026/3/26	critical
306655	AlmaLinux 8 : nodejs:22 (ALSA-2026:7123)	Nessus	Alma Linux Local Security Checks	2026/4/16	2026/4/16	critical
306669	AlmaLinux 9 : nodejs:24 (ALSA-2026:7350)	Nessus	Alma Linux Local Security Checks	2026/4/16	2026/4/16	critical
305780	RHEL 9 : nodejs:22 (RHSA-2026:7302)	Nessus	Red Hat Local Security Checks	2026/4/9	2026/4/9	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical