Red Hat Security AdvisoryRHSA-2026:2711
Red Hat Ceph Storage 8.1 security and bug fix update
Released 2026-02-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 8.1 Tools ceph-2:19.2.1-331.el9cp, ceph-base-2:19.2.1-331.el9cp, ceph-common-2:19.2.1-331.el9cp +31
Fixes 3 records
Priority LOW 37
taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01861 · Published 2020-02-17 · Partial fix CWE-668
Priority LOW 36
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01617 · Published 2022-07-25 · Partial fix · 2.0.3 CWE-1333
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00443 · Published 2025-10-29 · Partial fix · 1.24.8, 1.25.2
