Red Hat Security Advisory

RHSA-2026:2800

Red Hat Ceph Storage

Released 2026-02-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ceph Storage 7 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-7-rhel9

TI-2025-07108 CVE-2025-7783 · GHSA-fjxv-7rqg-78g4

HIGH 76

Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).

CVSS 4.0CRITICAL 9.4 Network No auth No interaction EPSS 0.0181 Published 2025-07-18 Partial fix · 2.5.4, 3.0.4 +1 CWE-330

TI-2025-05586 CVE-2025-6176 · GHSA-2qfp-q593-8484

HIGH 72

Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00533 Published 2025-10-31 Partial fix · 1.2.0, 2.13.4 CWE-400

TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53

MEDIUM 46

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-770

TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37

MEDIUM 40

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-409

TI-2025-12886 CVE-2025-14104 · GHSA-hrx4-rccm-xj6c

LOW 27

A flaw was found in util-linux.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00215 Published 2025-12-05 Partial fix · 2.41.3, 2.40.2-15.el10_1 +16 CWE-125