Red Hat Security Advisory

RHSA-2026:0531

Red Hat Developer Hub 1.8.2 release.

Released 2026-01-13 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2025-40094 CVE-2025-64756 · GHSA-5j98-mcp5-4vw2

MEDIUM 40

Glob matches files using patterns the shell uses.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0309 Published 2025-11-17 Partial fix · 10.5.0, 11.1.0 CWE-78

TI-2025-40515 CVE-2025-65945 · GHSA-869p-cjfg-cm3x

LOW 38

auth0/node-jws is a JSON Web Signature implementation for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00231 Published 2025-12-04 Partial fix · 3.2.3, 4.0.1 CWE-347

TI-2025-13959 CVE-2025-15284 · GHSA-6rw7-vpxm-498p

LOW 34

Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0045 Published 2025-12-29 Partial fix · 6.14.1 CWE-20