openSUSE 15.6 Nodejs24 Security Advisory SUSE-2026-0820-1

## This update for nodejs22 fixes the following issues: Security fixes: * CVE-2026-22036: Fixed unbounded decompression chain in HTTP response leading to resource exhaustion (bsc#1256848) * CVE-2026-21637: Fixed synchronous exceptions thrown during callbacks that bypass TLS error handling and causing denial of service (bsc#1256576) * CVE-2025-55132: Fixed futimes() ability to acces file even if process has read permissions only (bsc#1256571) * CVE-2025-55131: Fixed race condition that allowed allocations with leftover data leading to in-process secrets exposure (bsc#1256570) * CVE-2025-55130: Fixed filesystem permissions bypass via crafted symlinks (bsc#1256569) * CVE-2025-59465: Fixed malformed HTTP/2 HEADERS frame with invalid HPACK leading to crash (bsc#1256573)