Red Hat Security AdvisoryRHSA-2026:33154
Red Hat Ceph Storage
Released 2026-06-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ceph Storage 7.1 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-7-rhel9
Fixes 11 records
Priority HIGH 73
A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01939 · Published 2024-07-15 · Partial fix · 70.0, 70.0.0 CWE-94
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.02922 · Published 2026-01-07 · Partial fix · 2.6.3 CWE-409
Priority MEDIUM 45
A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00611 · Published 2025-06-09 · Partial fix · 1.1.12, 2.0.2 +2 CWE-1333
Priority MEDIUM 43
An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal").
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02299 · Published 2025-03-27 · Partial fix · 1.16.4, 2.1.2 +2 CWE-22
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00668 · Published 2025-11-13 · Partial fix · 0.43.0 CWE-617
Priority MEDIUM 40
The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01823 · Published 2026-01-21 · Partial fix · 4.17.23, 4.18.0 CWE-1321
Priority LOW 38
tar-fs provides filesystem bindings for tar-stream.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0058 · Published 2025-09-24 · Partial fix · 3.1.1, 2.1.3 +3 CWE-22
Priority LOW 30
pyjwt v2.10.1 was discovered to contain weak encryption.
CVSS 3.1HIGH 7.0· Network · No auth · No interaction · EPSS 0.00195 · Published 2025-07-31 · Fixed CWE-311
Priority LOW 28
Ceph is a distributed object, block, and file storage platform.
CVSS 3.1MEDIUM 6.5· Adjacent network · Low privileges · No interaction · EPSS 0.00209 · Published 2025-06-26 · Partial fix · 18.2.5, 19.2.3 CWE-269
Priority LOW 28
urllib3 is a user-friendly HTTP client library for Python.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00474 · Published 2025-06-19 · Partial fix · 2.5.0 CWE-601
Priority LOW 21
nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00665 · Published 2024-12-09 · Partial fix · 5.0.9, 3.3.8 CWE-835
THREATIST.IORead the docs