Red Hat Security Advisory

RHSA-2026:34527

General availability of the satellite/iop-host-inventory-frontend-rhel9 container image

Released 2026-07-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9

TI-2026-32428 CVE-2026-44494 · GHSA-35jp-ww65-95wh

HIGH 73

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.01057 Published 2026-06-11 Partial fix · 1.16.0 CWE-1321

TI-2026-32424 CVE-2026-44488 · GHSA-777c-7fjr-54vf

HIGH 72

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00669 Published 2026-06-11 Partial fix · 1.16.0 CWE-770

TI-2026-32423 CVE-2026-44487 · GHSA-p92q-9vqr-4j8v

HIGH 69

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00689 Published 2026-06-11 Partial fix · 1.16.0, 0.32.0 CWE-201

TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37

MEDIUM 40

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-409