diff --git a/.gitignore b/.gitignore
index 3d9dfb0..736b736 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,7 +1,7 @@
 SOURCES/cjs-module-lexer-2.2.0.tar.gz
 SOURCES/icu4c-78.2-data-bin-b.zip
 SOURCES/icu4c-78.2-data-bin-l.zip
-SOURCES/node-v22.23.1-stripped.tar.gz
-SOURCES/undici-6.27.0.tar.gz
+SOURCES/node-v22.23.2-stripped.tar.gz
+SOURCES/undici-6.28.0.tar.gz
 SOURCES/wasi-sdk-wasi-sdk-12.tar.gz
 SOURCES/wasi-sdk-wasi-sdk-20.tar.gz
diff --git a/.nodejs.metadata b/.nodejs.metadata
index 9d83f5c..aa69917 100644
--- a/.nodejs.metadata
+++ b/.nodejs.metadata
@@ -1,7 +1,7 @@
 7f1e286f563622e12e0e9a9283508138127373ce SOURCES/cjs-module-lexer-2.2.0.tar.gz
 7a91e81c4f2c8368d80285a5bbdfe278d68e4a84 SOURCES/icu4c-78.2-data-bin-b.zip
 b9f5918e2118ef8531b0ffc04b3d50e951e3a166 SOURCES/icu4c-78.2-data-bin-l.zip
-8751335622db226d57c19ed444575147f0b62396 SOURCES/node-v22.23.1-stripped.tar.gz
-bc432a140b42f84d643387f13cdfa41396d723bc SOURCES/undici-6.27.0.tar.gz
+8f8c3ce6bc3e879d084cbd629ea95085ecaba2fb SOURCES/node-v22.23.2-stripped.tar.gz
+d7df07bc61a870147de6a403be6d3f8fe03de1a6 SOURCES/undici-6.28.0.tar.gz
 5ea3a1deb65a52a36ceb41324da690f54b2a4805 SOURCES/wasi-sdk-wasi-sdk-12.tar.gz
 da40abcb73a6dddafced6174d24ed49e414cda3c SOURCES/wasi-sdk-wasi-sdk-20.tar.gz
diff --git a/SPECS/nodejs.spec b/SPECS/nodejs.spec
index a905d56..5e084d2 100644
--- a/SPECS/nodejs.spec
+++ b/SPECS/nodejs.spec
@@ -67,7 +67,7 @@
 # This is used by both the nodejs package and the npm subpackage that
 # has a separate version - the name is special so that rpmdev-bumpspec
 # will bump this rather than adding .1 to the end.
-%global baserelease 3
+%global baserelease 1
 
 %{?!_pkgdocdir:%global _pkgdocdir %{_docdir}/%{name}-%{version}}
 
@@ -79,7 +79,7 @@
 %global nodejs_epoch 1
 %global nodejs_major 22
 %global nodejs_minor 23
-%global nodejs_patch 1
+%global nodejs_patch 2
 # nodejs_soversion - from NODE_MODULE_VERSION in src/node_version.h
 %global nodejs_soversion 127
 %global nodejs_abi %{nodejs_soversion}
@@ -109,7 +109,7 @@
 %global c_ares_version 1.34.6
 
 # llhttp - from deps/llhttp/include/llhttp.h
-%global llhttp_version 9.4.2
+%global llhttp_version 9.4.3
 
 # libuv - from deps/uv/include/uv/version.h
 %global libuv_version 1.51.0
@@ -166,7 +166,7 @@
 %global sqlite_version 3.53.4
 
 # Version: jq '.version' deps/undici/src/package.json
-%global undici_version 6.27.0
+%global undici_version 6.28.0
 
 
 Name: nodejs
@@ -210,8 +210,8 @@ Source201: cjs-module-lexer-2.2.0.tar.gz
 # Version source (cjs-module-lexer tarball): Makefile
 Source202: https://github.com/WebAssembly/wasi-sdk/archive/wasi-sdk-12/wasi-sdk-wasi-sdk-12.tar.gz
 
-# Original: https://github.com/nodejs/undici/archive/refs/tags/v6.27.0.tar.gz
-# Adjustments: rm -f undici-6.27.0/lib/llhttp/llhttp*wasm*
+# Original: https://github.com/nodejs/undici/archive/refs/tags/v6.28.0.tar.gz
+# Adjustments: rm -f undici-6.28.0/lib/llhttp/llhttp*wasm*
 Source211: undici-%{undici_version}.tar.gz
 
 # The WASM blob was made using wasi-sdk v16; compiler libraries are linked in.
@@ -390,7 +390,7 @@ Requires: nodejs-cjs-module-lexer
 %endif
 
 %if %{with bundled_undici}
-Provides: bundled(nodejs-undici) = 6.27.0
+Provides: bundled(nodejs-undici) = 6.28.0
 %else
 BuildRequires: nodejs-undici
 Requires: nodejs-undici
@@ -961,6 +961,11 @@ end
 
 
 %changelog
+* Mon Aug 10 2026 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.23.2-1
+- Update to version 22.23.2
+  Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043
+  Resolves: RHEL-235693 RHEL-235688 RHEL-235662
+
 * Wed Aug 5 2026 Tomas Juhasz <tjuhasz@redhat.com> - 1:22.23.1-3
 - deps: update npm/ip-address to 10.4.0 
 - deps: update npm/brace-expansion to 2.1.4