RHSA-2026:90388
Vulnerability from csaf_redhat - Published: 2026-10-26 17:44 - Updated: 2026-10-30 13:56Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
grafana12.4:
* grafana12.4-12.4.13-0.4.hum1 (aarch64, x86_64)
* grafana12.4-12.4.13-0.4.hum1.src (src)
Security Fix(es):
grafana12.4:
* CVE-2026-100352
* CVE-2026-100353
* CVE-2026-100354
* CVE-2026-110816
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in jose. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service (DoS) through memory exhaustion. When processing JSON Web Encryption (JWE) tokens that use compression, the library decompresses the payload without enforcing limits on the output size or expansion ratio. An attacker can exploit this issue by sending a small, crafted token, causing the application to consume excessive memory and crash.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails to restrict these unexpected values, the application triggers a runtime crash. This allows an attacker to cause a Denial of Service (DoS) on the affected service.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Important
A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service (DoS) by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before accessing them, processing these requests triggers an unhandled crash.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Important
A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack exhaustion. This condition causes the entire application process to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Important
A flaw was found in fast-uri. The library improperly applies dot-segment removal to relative Uniform Resource Identifier (URI) paths during normalization, causing leading parent-directory segments to be discarded. A remote attacker could supply a crafted relative path to an application that relies on fast-uri for resolution, caching, or authorization. This can cause the reference to escape its intended directory, potentially allowing unauthorized access to restricted resources.
CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Low
A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially crafted address to bypass host-based security policies, such as domain blocklists, redirect validations, or proxy routing rules. As a result, applications may inadvertently direct network requests to unintended destinations.
4.8 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Moderate
A flaw was found in fast-uri. The library incorrectly decodes percent-encoded characters in protocol schemes prior to validation, causing invalid or prohibited schemes to be accepted as valid. A remote attacker can exploit this vulnerability by submitting a specially crafted Uniform Resource Identifier (URI) to bypass application allowlists, potentially leading to Cross-Site Scripting (XSS) if the normalized output is rendered in a web browser.
6.1 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Moderate
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability to trigger cross-site scripting (XSS) by providing crafted input to applications that serialize or normalize relative Uniform Resource Identifiers (URIs) using the suffix reference option. Because the library fails to properly escape colons in the first path segment of relative paths, the generated string can be misinterpreted by downstream components as an absolute URI with an executable scheme.
CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Low
A flaw was found in qs. A remote attacker could cause a Denial of Service (DoS) by supplying specially crafted input to an application that re-serializes data using the comma array format. Because the library fails to safely handle array elements that cannot be converted to a string, an unhandled exception is thrown. In environments lacking error boundaries around the serialization routine, this uncaught exception causes the application process to crash.
5.3 (Medium)
Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Moderate
A flaw was found in body-parser. A remote, unauthenticated attacker can cause a Denial of Service (DoS) by sending a specially crafted HTTP request with compressed content containing unexpected trailing data. Because the application fails to handle decompression stream errors after processing the initial compressed content, the trailing data triggers an uncaught exception that terminates the server process.
7.5 (High)
Affected products
Fixed
3 products, the same list as for
CVE-2026-65627
Threats
Impact
Important
References
76 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\ngrafana12.4:\n * grafana12.4-12.4.13-0.4.hum1 (aarch64, x86_64)\n * grafana12.4-12.4.13-0.4.hum1.src (src)\n\nSecurity Fix(es):\n\ngrafana12.4:\n * CVE-2026-100352\n * CVE-2026-100353\n * CVE-2026-100354\n * CVE-2026-110816",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:90388",
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-100352",
"url": "https://access.redhat.com/security/cve/CVE-2026-100352"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-100353",
"url": "https://access.redhat.com/security/cve/CVE-2026-100353"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-100354",
"url": "https://access.redhat.com/security/cve/CVE-2026-100354"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-110816",
"url": "https://access.redhat.com/security/cve/CVE-2026-110816"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-65627",
"url": "https://access.redhat.com/security/cve/CVE-2026-65627"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16491",
"url": "https://access.redhat.com/security/cve/CVE-2026-16491"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-111181",
"url": "https://access.redhat.com/security/cve/CVE-2026-111181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-110306",
"url": "https://access.redhat.com/security/cve/CVE-2026-110306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-110180",
"url": "https://access.redhat.com/security/cve/CVE-2026-110180"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-110095",
"url": "https://access.redhat.com/security/cve/CVE-2026-110095"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-110725",
"url": "https://access.redhat.com/security/cve/CVE-2026-110725"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90388.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-10-30T13:56:27+00:00",
"generator": {
"date": "2026-10-30T13:56:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:90388",
"initial_release_date": "2026-10-26T17:44:40+00:00",
"revision_history": [
{
"date": "2026-10-26T17:44:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-27T21:24:04+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-30T13:56:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"product": {
"name": "grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"product_id": "grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana12.4@12.4.13-0.4.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana12.4-0:12.4.13-0.4.hum1@src",
"product": {
"name": "grafana12.4-0:12.4.13-0.4.hum1@src",
"product_id": "grafana12.4-0:12.4.13-0.4.hum1@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana12.4@12.4.13-0.4.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "grafana12.4-0:12.4.13-0.4.hum1@x86_64",
"product": {
"name": "grafana12.4-0:12.4.13-0.4.hum1@x86_64",
"product_id": "grafana12.4-0:12.4.13-0.4.hum1@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/grafana12.4@12.4.13-0.4.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana12.4-0:12.4.13-0.4.hum1@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64"
},
"product_reference": "grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana12.4-0:12.4.13-0.4.hum1@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src"
},
"product_reference": "grafana12.4-0:12.4.13-0.4.hum1@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "grafana12.4-0:12.4.13-0.4.hum1@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
},
"product_reference": "grafana12.4-0:12.4.13-0.4.hum1@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-65627",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-10-26T20:02:39.548058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2561063"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jose. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service (DoS) through memory exhaustion. When processing JSON Web Encryption (JWE) tokens that use compression, the library decompresses the payload without enforcing limits on the output size or expansion ratio. An attacker can exploit this issue by sending a small, crafted token, causing the application to consume excessive memory and crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jose: jose: Denial of Service via unbounded decompression of crafted JWE tokens",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A decompression bomb vulnerability was discovered in the Erlang and Elixir jose library when handling JSON Web Encryption (JWE) tokens with compression enabled (DEF). The library uncompresses ciphertext using zlib:inflate/2 without bounding the output size or inflation ratio. An unauthenticated remote attacker can exploit this flaw by submitting a small, highly compressed crafted JWE token, causing uncontrolled memory allocation that exhausts system resources and crashes the BEAM virtual machine, resulting in a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-65627"
},
{
"category": "external",
"summary": "RHBZ#2561063",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2561063"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-65627",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-65627"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-65627",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65627"
},
{
"category": "external",
"summary": "https://cna.erlef.org/cves/CVE-2026-65627.html",
"url": "https://cna.erlef.org/cves/CVE-2026-65627.html"
},
{
"category": "external",
"summary": "https://github.com/potatosalad/erlang-jose/commit/857eb8e7f2d33e2c9ca2189e77226561cacaf2ad",
"url": "https://github.com/potatosalad/erlang-jose/commit/857eb8e7f2d33e2c9ca2189e77226561cacaf2ad"
},
{
"category": "external",
"summary": "https://github.com/potatosalad/erlang-jose/commit/a7746ecd4950f85a393136e449a91dac62b5c429",
"url": "https://github.com/potatosalad/erlang-jose/commit/a7746ecd4950f85a393136e449a91dac62b5c429"
},
{
"category": "external",
"summary": "https://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm",
"url": "https://github.com/potatosalad/erlang-jose/security/advisories/GHSA-wfpv-qxp8-x5gm"
},
{
"category": "external",
"summary": "https://osv.dev/vulnerability/EEF-CVE-2026-65627",
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-65627"
}
],
"release_date": "2026-10-26T19:53:16.336000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
},
{
"category": "workaround",
"details": "Reject JWE tokens carrying the \"zip\": \"DEF\" header at the application gateway or API perimeter before decryption routines are executed.",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jose: jose: Denial of Service via unbounded decompression of crafted JWE tokens"
},
{
"cve": "CVE-2026-100352",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-10-15T16:01:52.384419+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2553588"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails to restrict these unexpected values, the application triggers a runtime crash. This allows an attacker to cause a Denial of Service (DoS) on the affected service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this vulnerability as Important because it enables remote, unauthenticated attackers to cause a denial of service without requiring privileges or user interaction. Successful exploitation relies on services exposing OpenAPI 3.1 endpoints that accept YAML request bodies with numeric boundary definitions. If input schema validation executes in asynchronous goroutines or runtimes lacking top-level panic handlers, the resulting runtime exception terminates the entire daemon rather than terminating only the active connection.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-100352"
},
{
"category": "external",
"summary": "RHBZ#2553588",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553588"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-100352",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100352"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-100352",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100352"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/commit/4487f198ab8be0c37d6ca72c54f5dca4dc25270e",
"url": "https://github.com/getkin/kin-openapi/commit/4487f198ab8be0c37d6ca72c54f5dca4dc25270e"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.148.0",
"url": "https://github.com/getkin/kin-openapi/releases/tag/v0.148.0"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-rj39-cv6w-8wv7",
"url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-rj39-cv6w-8wv7"
}
],
"release_date": "2026-10-15T15:54:25.834000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values"
},
{
"cve": "CVE-2026-100353",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-10-15T16:22:12.494131+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2553592"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service (DoS) by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before accessing them, processing these requests triggers an unhandled crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because unauthenticated remote attackers can reliably terminate affected services without requiring elevated privileges or user interaction. In applications utilizing kin-openapi to validate incoming API traffic against OpenAPI specifications, specially structured array parameters in query strings or form payloads induce a runtime panic in the request parsing layer. While the flaw terminates the host process and causes a denial of service, it does not permit arbitrary code execution or data exposure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-100353"
},
{
"category": "external",
"summary": "RHBZ#2553592",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553592"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-100353",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100353"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-100353",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100353"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/commit/9814d1f2b212f3508bf52296aa9e248b2122a5a9",
"url": "https://github.com/getkin/kin-openapi/commit/9814d1f2b212f3508bf52296aa9e248b2122a5a9"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.149.0",
"url": "https://github.com/getkin/kin-openapi/releases/tag/v0.149.0"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-vrcc-3ch7-hppw",
"url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-vrcc-3ch7-hppw"
}
],
"release_date": "2026-10-15T16:03:50.514000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding"
},
{
"cve": "CVE-2026-100354",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-10-15T16:21:51.407667+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2553590"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack exhaustion. This condition causes the entire application process to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having an Important impact because an unrecoverable Go runtime stack exhaustion terminates the host process immediately, resulting in a complete denial of service across all concurrent sessions. In Red Hat environments, applications that rely on this library to dynamically validate incoming API requests or responses against schemas with recursive combinators are susceptible to being crashed by remote clients. Because the failure cannot be trapped by standard application error recovery handlers, a single crafted interaction can disrupt service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-100354"
},
{
"category": "external",
"summary": "RHBZ#2553590",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553590"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-100354",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-100354"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-100354",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-100354"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/commit/9245cef66c840e27a08409a8a5cd0ee930c5bcff",
"url": "https://github.com/getkin/kin-openapi/commit/9245cef66c840e27a08409a8a5cd0ee930c5bcff"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/releases/tag/v0.149.0",
"url": "https://github.com/getkin/kin-openapi/releases/tag/v0.149.0"
},
{
"category": "external",
"summary": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-g8cf-rcjf-c8cf",
"url": "https://github.com/getkin/kin-openapi/security/advisories/GHSA-g8cf-rcjf-c8cf"
}
],
"release_date": "2026-10-15T16:02:00.566000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation"
},
{
"cve": "CVE-2026-110095",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-10-20T07:00:55.676503+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2556002"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. The library improperly applies dot-segment removal to relative Uniform Resource Identifier (URI) paths during normalization, causing leading parent-directory segments to be discarded. A remote attacker could supply a crafted relative path to an application that relies on fast-uri for resolution, caching, or authorization. This can cause the reference to escape its intended directory, potentially allowing unauthorized access to restricted resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Path traversal via improper relative URI normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having a Low impact because exploitation requires an application to specifically pass untrusted relative paths to URI normalization or serialization routines prior to base resolution or access control checks. Within Red Hat products, fast-uri is primarily present as an indirect dependency in web consoles, dashboard interfaces, and frontend tooling. Typical product deployments do not expose authorization or routing workflows that rely on standalone relative URI normalization of untrusted input, substantially limiting the attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110095"
},
{
"category": "external",
"summary": "RHBZ#2556002",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556002"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110095",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110095"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110095",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110095"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h"
}
],
"release_date": "2026-10-20T06:56:56.456000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "fast-uri: fast-uri: Path traversal via improper relative URI normalization"
},
{
"cve": "CVE-2026-110180",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-10-20T07:21:50.840605+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2556008"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially crafted address to bypass host-based security policies, such as domain blocklists, redirect validations, or proxy routing rules. As a result, applications may inadvertently direct network requests to unintended destinations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass via improper host canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate severity because exploitation requires a specific application architecture where host-based access controls or redirection boundaries rely directly on fast-uri parsing of untrusted network input. Because successful manipulation only allows bypassing host filters or redirecting traffic rather than granting arbitrary code execution, the overall blast radius remains constrained. In Red Hat environments, the affected Node.js package is primarily distributed as an embedded dependency within web applications and plugins, meaning the risk is contingent upon whether the consuming service exposes URL canonicalization to external users.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110180"
},
{
"category": "external",
"summary": "RHBZ#2556008",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556008"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110180",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110180"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110180",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110180"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-wjr9-j795-jxcr",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-wjr9-j795-jxcr"
}
],
"release_date": "2026-10-20T07:00:42.153000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-uri: fast-uri: Security policy bypass via improper host canonicalization"
},
{
"cve": "CVE-2026-110306",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-10-20T07:21:28.248626+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2556005"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. The library incorrectly decodes percent-encoded characters in protocol schemes prior to validation, causing invalid or prohibited schemes to be accepted as valid. A remote attacker can exploit this vulnerability by submitting a specially crafted Uniform Resource Identifier (URI) to bypass application allowlists, potentially leading to Cross-Site Scripting (XSS) if the normalized output is rendered in a web browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Cross-Site Scripting via improper URI scheme decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate impact for Red Hat products because successful exploitation requires user interaction to execute cross-site scripting in a browser and does not permit direct server-side compromise or privilege escalation. The flaw affects application environments that rely on fast-uri to parse and normalize untrusted URIs without performing downstream output sanitization. In many Red Hat web user interfaces and console plugins, overall exposure is further constrained by framework-level sanitization and browser security controls such as Content Security Policy.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110306"
},
{
"category": "external",
"summary": "RHBZ#2556005",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556005"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110306"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg"
}
],
"release_date": "2026-10-20T07:03:47.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "fast-uri: fast-uri: Cross-Site Scripting via improper URI scheme decoding"
},
{
"cve": "CVE-2026-110725",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-10-20T07:21:44.951200+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2556007"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability to trigger cross-site scripting (XSS) by providing crafted input to applications that serialize or normalize relative Uniform Resource Identifiers (URIs) using the suffix reference option. Because the library fails to properly escape colons in the first path segment of relative paths, the generated string can be misinterpreted by downstream components as an absolute URI with an executable scheme.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Cross-site scripting via unescaped colon in relative URI paths",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having a Low impact because exploitation is constrained to applications invoking specific non-default parsing configurations on untrusted input without scheme authority. Across Red Hat products, this library is primarily embedded as an internal dependency within build pipelines and administrative web consoles, where user-controlled relative URIs are not handled using this specialized setting. Consequently, the likelihood of triggering cross-site scripting or URI misinterpretation in default deployments is minimal.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110725"
},
{
"category": "external",
"summary": "RHBZ#2556007",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556007"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110725",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110725"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110725",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110725"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-333x-w4r6-6crp",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-333x-w4r6-6crp"
}
],
"release_date": "2026-10-20T07:06:29.946000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "fast-uri: fast-uri: Cross-site scripting via unescaped colon in relative URI paths"
},
{
"cve": "CVE-2026-110816",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-10-14T22:21:01.105590+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2552954"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs. A remote attacker could cause a Denial of Service (DoS) by supplying specially crafted input to an application that re-serializes data using the comma array format. Because the library fails to safely handle array elements that cannot be converted to a string, an unhandled exception is thrown. In environments lacking error boundaries around the serialization routine, this uncaught exception causes the application process to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via unhandled exception during array serialization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat Product Security has rated this vulnerability as Moderate severity because successful exploitation requires an application to explicitly select the non-default comma array formatting option when processing untrusted input. Under typical Node.js deployment frameworks, the resulting uncaught exception is trapped within request-level boundaries, terminating only the isolated request instead of crashing the hosting service. A complete process failure is restricted to environments lacking top-level exception handlers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110816"
},
{
"category": "external",
"summary": "RHBZ#2552954",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552954"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110816",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110816"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110816",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110816"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/a952e7519338ef0cfb25694a2988848f93333727",
"url": "https://github.com/ljharb/qs/commit/a952e7519338ef0cfb25694a2988848f93333727"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw"
}
],
"release_date": "2026-10-14T22:05:24.015000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "qs: qs: Denial of Service via unhandled exception during array serialization"
},
{
"cve": "CVE-2026-111181",
"cwe": {
"id": "CWE-248",
"name": "Uncaught Exception"
},
"discovery_date": "2026-10-22T14:41:42.751154+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2559049"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in body-parser. A remote, unauthenticated attacker can cause a Denial of Service (DoS) by sending a specially crafted HTTP request with compressed content containing unexpected trailing data. Because the application fails to handle decompression stream errors after processing the initial compressed content, the trailing data triggers an uncaught exception that terminates the server process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "body-parser: body-parser: Denial of Service via unhandled decompression stream error",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an unauthenticated remote attacker can crash the entire application process, leading to a complete denial of service. Applications that rely on default body-parser configurations automatically decompress incoming request bodies before route matching and authentication are executed. As a result, any exposed endpoint accepting body data can be exploited without privileges, causing an uncaught stream exception that terminates the Node.js runtime.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-111181"
},
{
"category": "external",
"summary": "RHBZ#2559049",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2559049"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-111181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-111181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-111181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111181"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828",
"url": "https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828"
}
],
"release_date": "2026-10-22T14:29:56.577000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T17:44:40+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:90388"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@aarch64",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@src",
"Red Hat Hardened Images:grafana12.4-0:12.4.13-0.4.hum1@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "body-parser: body-parser: Denial of Service via unhandled decompression stream error"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.