Red Hat Security Advisory

RHSA-2026:2921

RHTAS 1.2.2 - Red Hat Trusted Artifact Signer Release

Released 2026-02-18 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2025-40515 CVE-2025-65945 · GHSA-869p-cjfg-cm3x

LOW 38

auth0/node-jws is a JSON Web Signature implementation for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00231 Published 2025-12-04 Partial fix · 3.2.3, 4.0.1 CWE-347

TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2

LOW 33

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-12-02 Partial fix · 1.24.11, 1.25.5 CWE-295