TI-2026-32427 CVE-2026-44492 · GHSA-pjwm-pj3p-43mv
Server-side request forgery in axios
Priority HIGH 76
Axios is a promise based HTTP client for the browser and Node.js.
RHSA-2026:46885
multicluster engine for Kubernetes v2.10.4 security update
Released 2026-07-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.10 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +4
Fixes 22 records
TI-2026-32848 CVE-2026-44990 · GHSA-rpr9-rxv7-x643
Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`
Priority HIGH 75
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API.
TI-2026-32428 CVE-2026-44494 · GHSA-35jp-ww65-95wh
Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
Priority HIGH 73
Axios is a promise based HTTP client for the browser and Node.js.
TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m
js-yaml: YAML merge-key chains can force quadratic CPU consumption
Priority HIGH 72
js-yaml is a JavaScript YAML parser and dumper.
TI-2026-32430 CVE-2026-44496 · GHSA-hfxv-24rg-xrqf
Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
TI-2026-32424 CVE-2026-44488 · GHSA-777c-7fjr-54vf
Axios: Allocation of Resources Without Limits or Throttling in axios
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
TI-2026-32422 CVE-2026-44486 · GHSA-j5f8-grm9-p9fc
Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
TI-2026-32429 CVE-2026-44495 · GHSA-3g43-6gmg-66jw
Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Priority HIGH 69
Axios is a promise based HTTP client for the browser and Node.js.
TI-2026-32423 CVE-2026-44487 · GHSA-p92q-9vqr-4j8v
Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
Priority HIGH 69
Axios is a promise based HTTP client for the browser and Node.js.
TI-2026-30791 CVE-2026-42508 · GHSA-5cgq-3rg8-m6cv
Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
Priority MEDIUM 57
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation.
TI-2026-13581 CVE-2026-16242 · GHSA-43hh-68v6-mf36
Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates
Priority MEDIUM 50
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes.
TI-2026-28712 CVE-2026-39830 · GHSA-vgwf-h737-ff37
Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
Priority MEDIUM 46
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop.
TI-2026-26126 CVE-2026-33747 · GHSA-4c29-8rgm-jvjj
BuildKit vulnerable to malicious frontend causing file escape outside of storage root
Priority MEDIUM 43
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2026-27208 CVE-2026-34986 · GHSA-78h2-9frx-2jm8
Go JOSE affect by a panic in JWE decryption
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
TI-2026-26183 CVE-2026-33811 · GHSA-497x-jcxf-m478
Crash when handling long CNAME response in net
Priority MEDIUM 40
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
TI-2026-14230 CVE-2026-17107 · GHSA-vr7g-637m-v9mm
Cluster-proxy: impersonation-header injection grants cluster-admin on every managed cluster
Priority MEDIUM 40
A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE).
TI-2026-28711 CVE-2026-39829 · GHSA-w879-237q-wc7r
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
Priority LOW 39
The RSA and DSA public key parsers did not enforce size limits on key parameters.
TI-2026-26127 CVE-2026-33748 · GHSA-4vrq-3vrq-g6gg
BuildKit Git URL subdir component can cause access to restricted files
Priority LOW 36
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
TI-2026-32627 CVE-2026-44740 · GHSA-m3xc-h892-ggx6
go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion
Priority LOW 29
Billy is an interface filesystem abstraction for Go.
TI-2026-28710 CVE-2026-39828 · GHSA-45gg-vh54-h5m9
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
Priority LOW 28
When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a sec…
TI-2026-28717 CVE-2026-39835 · GHSA-78mq-xcr3-xm33
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
Priority LOW 25
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate.
TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27
Unbounded allocation when parsing GNU sparse map in archive/tar
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.