This page tracks the BellSoft Alpaquita fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-48617 →
BELL-CVE-2026-48617
BELL-CVE-2026-48617
Affected packages
Alpaquita:25
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"22.16.0-r1"},{"fixed":"22.23.0-r0"}]}]
Alpaquita:stream
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"18.16.1-r0"},{"fixed":"24.17.0-r0"}]}]
BellSoft Hardened Containers:25
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"22.16.0-r1"},{"fixed":"22.23.0-r0"}]}]
BellSoft Hardened Containers:stream
nodejs
[{"type":"ECOSYSTEM","events":[{"introduced":"18.16.1-r0"},{"fixed":"24.17.0-r0"}]}]
References
- advisory docs.bell-sw.com