RHSA-2026:24762

Vite is a frontend tooling framework for JavaScript.

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript.

pyasn1 is a generic ASN.1 library for Python.

This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project.

Axios is a promise based HTTP client for the browser and Node.js.

The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink.

Pillow is a Python imaging library.

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.

Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`.

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.