Red Hat Security AdvisoryRHSA-2026:2769
Red Hat Ceph Storage 7.1 security and bug fix updates
Released 2026-02-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 7.1 Tools ceph-2:18.2.1-381.el8cp, ceph-2:18.2.1-381.el9cp, ceph-base-2:18.2.1-381.el8cp +47
Fixes 10 records
Priority HIGH 67
The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.042 · Published 2021-03-29 · Partial fix · 1.13.0-2, 1.12.1 CWE-94
Priority HIGH 66
Ceph is a distributed object, block, and file storage platform.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00479 · Published 2025-11-12 · Partial fix CWE-20
Priority MEDIUM 60
DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00605 · Published 2025-02-14 · Partial fix · 3.2.4 CWE-79
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00668 · Published 2025-11-13 · Partial fix · 0.43.0 CWE-617
Priority LOW 36
In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01617 · Published 2022-07-25 · Partial fix · 2.0.3 CWE-1333
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2025-12-02 · Partial fix · 1.24.11, 1.25.5 CWE-295
Priority LOW 28
Ceph is a distributed object, block, and file storage platform.
CVSS 3.1MEDIUM 6.5· Adjacent network · Low privileges · No interaction · EPSS 0.00209 · Published 2025-06-26 · Partial fix · 18.2.5, 19.2.3 CWE-269
Priority LOW 27
A flaw was found in npm-serialize-javascript.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01122 · Published 2025-02-10 · Partial fix · 6.0.2, 4.4.8-2 +27 CWE-79
Priority LOW 21
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00665 · Published 2024-12-09 · Partial fix · 5.0.9, 3.3.8 CWE-835
Priority LOW 16
golang-jwt is a Go implementation of JSON Web Tokens.
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.00585 · Published 2024-11-04 · Partial fix · 4.5.1 CWE-755
THREATIST.IORead the docs