TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99
urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
RHSA-2026:2500
Red Hat multicluster global hub 1.4.4 security update
Released 2026-02-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Fixes 6 records
TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53
urllib3 allows an unbounded number of links in the decompression chain
Priority MEDIUM 46
urllib3 is a user-friendly HTTP client library for Python.
TI-2025-11739 CVE-2025-12816 · GHSA-5gfm-wpxj-wjgq
An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and…
Priority MEDIUM 44
An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence…
TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37
urllib3 Streaming API improperly handles highly compressed data
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.
TI-2025-41977 CVE-2025-68429 · GHSA-8452-54wp-rmv6
Storybook manager bundle may expose environment variables during build
Priority LOW 38
Storybook is a frontend workshop for building user interface components and pages in isolation.
TI-2025-13959 CVE-2025-15284 · GHSA-6rw7-vpxm-498p
arrayLimit bypass in bracket notation allows DoS via memory exhaustion
Priority LOW 34
Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.