RHSA-2026:36882

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

goxmlsig provides XML Digital Signatures implemented in Go.

The Delete function fails to properly validate offsets when processing malformed JSON input.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

gRPC-Go is the Go language implementation of gRPC.

Immutable.js provides many Persistent Immutable data structures.

Axios is a promise based HTTP client for the browser and Node.js.

Out-of-bounds Read vulnerability in Apache Thrift.

The net/url package does not set a limit on the number of query parameters in a query.

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.

Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.

Integer Overflow or Wraparound vulnerability in Apache Thrift.

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), Uncontrolled Resourc…

React Router is a router for React.

Out-of-bounds Read vulnerability in Apache Thrift.

OpenFGA is an authorization/permission engine built for developers.

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

Uncontrolled Recursion vulnerability in Apache Thrift.

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.

Cancelling a query (e.g.

archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.