TI-2026-08208 CVE-2026-9358 · GHSA-w9m9-85wc-3x92
postcss-selector-parser AST Serialization container.js toString recursion
Priority MEDIUM 57
A vulnerability was determined in postcss-selector-parser up to 6.1.2/7.1.2.
RHSA-2026:22934
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-06-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images cargo-1.96.0-1.hum1@aarch64, cargo-1.96.0-1.hum1@x86_64, clippy-1.96.0-1.hum1@aarch64 +32
Fixes 6 records
TI-2026-32373 CVE-2026-44432 · GHSA-mf9v-mfxr-j63j
urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API
Priority MEDIUM 40
urllib3 is an HTTP client library for Python.
TI-2026-05900 CVE-2026-6734 · GHSA-hm92-r4w5-c3mj
undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
Priority MEDIUM 40
Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin.
TI-2026-08486 CVE-2026-9675 · GHSA-38rv-x7px-6hhq
undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
Priority LOW 39
Impact: The undici WebSocket client enforces maxPayloadSize per-frame but does not enforce the cumulative size of fragmented uncompressed messages.
TI-2026-08499 CVE-2026-9697 · GHSA-vmh5-mc38-953g
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
Priority LOW 35
Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://).
TI-2026-32977 CVE-2026-45149 · GHSA-jxxr-4gwj-5jf2
brace-expansion: Large numeric range defeats documented `max` DoS protection
Priority LOW 33
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.