Red Hat Security Advisory

RHSA-2026:37577

Red Hat Hardened Images RPMs Security Update

Released 2026-07-10 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images aspnetcore-runtime-8.0-8.0.28-1.1.hum1@aarch64, aspnetcore-runtime-8.0-8.0.28-1.1.hum1@x86_64, aspnetcore-runtime-dbg-8.0-8.0.28-1.1.hum1@aarch64 +22

TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m

HIGH 72

js-yaml is a JavaScript YAML parser and dumper.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2026-07-08 Partial fix · 3.15.0, 4.3.0 CWE-407

TI-2026-28285 CVE-2026-39245 · GHSA-qcj4-cj8p-fhf4

MEDIUM 61

decompress before 4.2.2 contains an improper path containment check that enables directory traversal and arbitrary file write.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00375 Published 2026-07-09 Partial fix CWE-22

TI-2026-28283 CVE-2026-39243 · GHSA-jwp9-9v96-94mx

MEDIUM 58

decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00301 Published 2026-07-09 Partial fix CWE-59

TI-2026-42594 CVE-2026-59725 · GHSA-r635-g3xr-vw7x

MEDIUM 40

Socket.IO enables bidirectional and low-latency communication for every platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00636 Published 2026-07-08 Partial fix · 6.6.7 CWE-404