Red Hat Security Advisory

RHSA-2026:40415

Red Hat Hardened Images RPMs Security Update

Released 2026-07-15 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images aspnetcore-runtime-8.0-8.0.28-1.2.hum1@aarch64, aspnetcore-runtime-8.0-8.0.28-1.2.hum1@x86_64, aspnetcore-runtime-dbg-8.0-8.0.28-1.2.hum1@aarch64 +22

TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m

HIGH 72

js-yaml is a JavaScript YAML parser and dumper.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2026-07-08 Partial fix · 3.15.0, 4.3.0 CWE-407

TI-2026-38565 CVE-2026-53486 · GHSA-mp2f-45pm-3cg9

MEDIUM 49

The decompress package for Node.js extracts archives.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00749 Published 2026-07-14 Partial fix · 10.2.1, 11.1.3 CWE-22