Red Hat Security AdvisoryRHSA-2026:18868
linux-sgx security update
Released 2026-05-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) linux-sgx-2.26-7.el9, sgx-common-2.26-7.el9, sgx-libs-2.26-7.el9 +5
Fixes 5 records
Priority HIGH 69
node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink creation logic.
CVSS 3.1HIGH 8.2· Network · No auth · User interaction · EPSS 0.00608 · Published 2026-01-28 · Partial fix · 7.5.7 CWE-22
Priority HIGH 69
node-tar is a Tar for Node.js.
CVSS 4.0HIGH 8.2· Local · No auth · User interaction · EPSS 0.00376 · Published 2026-01-16 · Partial fix · 7.5.3 CWE-22
Priority MEDIUM 40
The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01823 · Published 2026-01-21 · Partial fix · 4.17.23, 4.18.0 CWE-1321
Priority LOW 38
node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00264 · Published 2026-01-20 · Partial fix · 7.5.4 CWE-176
Priority LOW 34
Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0045 · Published 2025-12-29 · Partial fix · 6.14.1 CWE-20
