Red Hat Security Advisory

RHSA-2026:10172

RHTAS 1.3.4 - Red Hat Trusted Artifact Signer Release

Released 2026-04-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/rhtas-console-rhel9, registry.redhat.io/rhtas/rhtas-console-ui-rhel9

TI-2026-28989 CVE-2026-40175 · GHSA-fvcv-3m26-pcqx

MEDIUM 57

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.01979 Published 2026-04-10 Partial fix · 1.15.0, 0.31.0 CWE-113

TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3

MEDIUM 49

gRPC-Go is the Go language implementation of gRPC.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01619 Published 2026-03-20 Partial fix · 1.79.3 CWE-285

TI-2026-04296 CVE-2026-4926 · GHSA-j3q9-mxjg-w52f

MEDIUM 40

Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00805 Published 2026-03-26 Partial fix · 8.4.0 CWE-1333