Red Hat Security Advisory

RHSA-2026:26994

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-06-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images dotnet-sdk-8.0-8.0.128-1.hum1@aarch64, dotnet-sdk-8.0-8.0.128-1.hum1@x86_64, dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.hum1@aarch64 +6

TI-2026-42685 CVE-2026-59870 · GHSA-724g-mxrg-4qvm

HIGH 72

js-yaml is a JavaScript YAML parser and dumper.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0074 Published 2026-07-08 Partial fix · 5.2.1, 3.15.1 +1 CWE-407

TI-2026-42683 CVE-2026-59868 · GHSA-g796-fgmg-93mv

HIGH 72

js-yaml is a JavaScript YAML parser and dumper.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00644 Published 2026-07-08 Fixed in 5.2.0 CWE-407

TI-2026-33473 CVE-2026-45736 · GHSA-58qx-3vcg-4xpx

HIGH 66

ws is an open source WebSocket client and server for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-05-15 Partial fix · 8.20.1 CWE-908

TI-2026-33337 CVE-2026-45591 · GHSA-f8h2-vmm9-qhj6

MEDIUM 44

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02481 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +2 CWE-400

TI-2026-42593 CVE-2026-59724 · GHSA-gr94-w7qr-f4j3

MEDIUM 40

Socket.IO enables bidirectional and low-latency communication for every platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-07-08 Partial fix · 6.6.7 CWE-20

TI-2026-33262 CVE-2026-45491 · GHSA-7q4v-2mr6-5gpx

LOW 28

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00388 Published 2026-06-09 Fixed in 10.0.9, 8.0.28 +1 CWE-59