Red Hat Security AdvisoryRHSA-2026:37385
rh-podman-desktop security advisory update
Released 2026-07-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Extensions Channel (v. 10) rh-podman-desktop-1.1.1-1.el10_2
Fixes 3 records
Priority MEDIUM 40
fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00634 · Published 2026-05-04 · Partial fix · 3.1.1, 2.4.1 CWE-22
Priority LOW 39
fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00512 · Published 2026-05-05 · Partial fix · 3.1.2, 2.4.1 CWE-436
Priority LOW 36
protobufjs compiles protobuf definitions into JavaScript (JS) functions.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00407 · Published 2026-05-13 · Partial fix · 7.5.6, 8.0.2 CWE-94
