Red Hat Security Advisory

RHSA-2026:25561

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-06-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images nodejs24-24.16.0-1.hum1@aarch64, nodejs24-24.16.0-1.hum1@src, nodejs24-24.16.0-1.hum1@x86_64 +14

TI-2026-08486 CVE-2026-9675 · GHSA-38rv-x7px-6hhq

LOW 39

Impact: The undici WebSocket client enforces maxPayloadSize per-frame but does not enforce the cumulative size of fragmented uncompressed messages.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00426 Published 2026-06-17 Partial fix · 8.5.0 CWE-400