This page tracks the BellSoft Alpaquita fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-21717 →
BELL-CVE-2026-21717
BELL-CVE-2026-21717
Affected packages
Alpaquita:23
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"18.16.0-r0"},{"fixed":"20.20.2-r0"}]}]
Alpaquita:25
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"22.16.0-r1"},{"fixed":"22.22.2-r0"}]}]
Alpaquita:stream
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"18.16.1-r0"},{"fixed":"24.14.1-r0"}]}]
BellSoft Hardened Containers:23
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"18.16.0-r0"},{"fixed":"20.20.2-r0"}]}]
BellSoft Hardened Containers:25
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"22.16.0-r1"},{"fixed":"22.22.2-r0"}]}]
BellSoft Hardened Containers:stream
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"18.16.1-r0"},{"fixed":"24.14.1-r0"}]}]
References
- advisory docs.bell-sw.com