Red Hat Security Advisory

RHSA-2026:45360

Red Hat Hardened Images RPMs Security Update

Released 2026-07-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images nodejs26-1:26.5.0-1.4.hum1@aarch64, nodejs26-1:26.5.0-1.4.hum1@src, nodejs26-1:26.5.0-1.4.hum1@x86_64 +16

TI-2026-12072 CVE-2026-14257 · GHSA-mh99-v99m-4gvg

MEDIUM 40

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00643 Published 2026-07-23 Partial fix · 5.0.8, 3.0.3 +2 CWE-400

TI-2026-11166 CVE-2026-13149 · GHSA-3jxr-9vmj-r5cp

MEDIUM 40

brace-expansion through 5.0.6 is vulnerable to denial of service.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00364 Published 2026-06-30 Partial fix · 5.0.7, 1.1.16 +1 CWE-400