Red Hat Security AdvisoryRHSA-2026:4467
RHACS 4.9.4 security and bug fix update
Released 2026-03-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-central-db-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-collector-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8 +8
Fixes 10 records
Priority MEDIUM 51
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00902 · Published 2026-02-05 · Partial fix · 1.24.13, 1.25.7 +1 CWE-295
Priority MEDIUM 50
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.02922 · Published 2026-01-07 · Partial fix · 2.6.3 CWE-409
Priority MEDIUM 46
urllib3 is a user-friendly HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00731 · Published 2025-12-05 · Partial fix · 2.6.0 CWE-770
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02292 · Published 2026-01-28 · Partial fix · 1.24.12, 1.25.6 CWE-770
Priority MEDIUM 40
urllib3 is a user-friendly HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00731 · Published 2025-12-05 · Partial fix · 2.6.0 CWE-409
Priority MEDIUM 40
The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.01823 · Published 2026-01-21 · Partial fix · 4.17.23, 4.18.0 CWE-1321
Priority LOW 38
jsPDF is a library to generate PDFs in JavaScript.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00589 · Published 2026-02-02 · Fixed in 4.1.0 CWE-116
Priority LOW 34
jsPDF is a library to generate PDFs in JavaScript.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00278 · Published 2026-02-02 · Fixed in 4.1.0 CWE-362
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0049 · Published 2025-12-02 · Partial fix · 1.24.11, 1.25.5 CWE-295
Priority LOW 30
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00738 · Published 2026-01-28 · Partial fix · 1.24.12, 1.25.6 CWE-770
THREATIST.IORead the docs