Red Hat Security AdvisoryRHSA-2026:33313
A Subscription Management tool for finding and reporting Red Hat product usage
Released 2026-06-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
Fixes 13 records
Priority HIGH 77
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00729 · Published 2026-06-09 · Partial fix · 1.2.1, 2.0.2 CWE-835
Priority HIGH 72
An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.018 · Published 2024-05-13 · Partial fix CWE-122
Priority MEDIUM 55
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.10856 · Published 2026-05-22 · Partial fix · 37.0.1.1, R36 P5 +3 CWE-122
Priority MEDIUM 42
Stack-based buffer overflow in libtasn1 version: v4.20.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0137 · Published 2026-01-07 · Partial fix CWE-787
Priority MEDIUM 41
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01049 · Published 2026-04-07 · Partial fix · 3.6.2, 3.5.6 +3 CWE-754
Priority MEDIUM 40
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.0068 · Published 2026-05-13 · Partial fix · 2.7.0 CWE-409
Priority LOW 37
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.01071 · Published 2026-03-26 · Partial fix · 1.6.56 CWE-416
Priority LOW 36
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00331 · Published 2026-05-13 · Partial fix · 2.7.0 CWE-200
Priority LOW 35
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
CVSS 3.1HIGH 7.6· Network · No auth · User interaction · EPSS 0.00751 · Published 2026-03-26 · Partial fix · 1.6.56 CWE-125
Priority LOW 32
Vim is an open source, command line text editor.
CVSS 3.1MEDIUM 6.6· Local · No auth · User interaction · EPSS 0.00501 · Published 2026-04-24 · Fixed in 9.2.0357 CWE-78
Priority LOW 24
A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00173 · Published 2025-09-25 · Partial fix · 1.1.39-8.el10_2.1, 1.1.39-8.el10_0.1 +13 CWE-825
Priority LOW 20
A flaw was found in GNU Coreutils.
CVSS 3.1MEDIUM 4.4· Local · No auth · User interaction · EPSS 0.0031 · Published 2025-05-27 · Partial fix · 9.8, 9.5-8.el10_2 +33 CWE-121
Priority LOW 19
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation…
CVSS 4.0MEDIUM 4.1· Local · Low privileges · User interaction · EPSS 0.0032 · Published 2026-06-01 · Partial fix · 26.1.2 CWE-22
THREATIST.IORead the docs