Red Hat Security Advisory

RHSA-2026:33521

Red Hat Hardened Images RPMs Security Update

Released 2026-06-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images python3.14-3.14.6-1.1.hum1@aarch64, python3.14-3.14.6-1.1.hum1@src, python3.14-3.14.6-1.1.hum1@x86_64 +26

Fixes 1 record

TI-2026-07665 CVE-2026-8723 · GHSA-q8mj-m7cp-5q26

qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly

HIGH 67

### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00399 Published 2026-05-16 Partial fix · 6.15.2 CWE-476