Skip to content
English
Manage and Create Tickets
  • There are no suggestions because the search field is empty.

Node.js Vulnerability Findings in FileCloud Server 23.263.2

Original Question or Issue:

 The customer reported AWS Inspector findings identifying Node.js vulnerabilities in the nodejs-24.18.1-1nodesource.src.rpm package installed on their FileCloud server. They asked whether they need to wait for a future FileCloud release to obtain the fixed Node.js version (24.22.1). 

Environment:

  • Product - FileCloud Server
  • Version - 23.263.2
  • Platform - Linux

Steps to Reproduce:

 Not applicable. The issue was identified through AWS Inspector vulnerability scanning. 

Error or Log Message:

AWS Inspector reported the following CVEs affecting the installed Node.js package:

  • CVE-2026-106069
  • CVE-2026-106072
  • CVE-2026-105482
  • CVE-2026-105483
  • CVE-2026-111497

Defect or Enhancement Number:

 No JIRA assigned. 

Cause:

AWS Inspector flagged the Node.js 24.18.1 package for the reported vulnerabilities.

According to the Security Operations Center (SOC) team, FileCloud is not impacted by this vulnerability.

Resolution or Workaround:

The SOC team confirmed that FileCloud is not impacted by the reported vulnerability. The necessary updates will be included in the upcoming FileCloud Server 23.263.3 release, planned for November 2026. 

Notes: