Red Hat Security Advisory

RHSA-2026:26226

General availability of the satellite/iop-host-inventory-rhel9 container image

Released 2026-06-16 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-35991 CVE-2026-48710 · GHSA-86qp-5c8j-p5mr

CRITICAL 86KEV

Starlette is a lightweight ASGI framework/toolkit.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.70288 Published 2026-05-26 Partial fix · 1.0.1 CWE-444

TI-2026-25107 CVE-2026-32597 · GHSA-752w-5fwx-jx9f

HIGH 72

PyJWT is a JSON Web Token implementation in Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00299 Published 2026-03-12 Partial fix · 2.12.0 CWE-345

TI-2026-22899 CVE-2026-28684 · GHSA-mf9w-mj56-hr94

MEDIUM 64

python-dotenv reads key-value pairs from a .env file and can set them as environment variables.

CVSS 3.1MEDIUM 6.6 Local Low privileges User interaction EPSS 0.00252 Published 2026-04-20 Partial fix · 1.2.2 CWE-59

TI-2026-32372 CVE-2026-44431 · GHSA-qccp-gfcp-xxvc

LOW 36

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00331 Published 2026-05-13 Partial fix · 2.7.0 CWE-200