Red Hat Security Advisory

RHSA-2026:47618

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-07-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images grafana13.1-13.1.1-0.2.hum1@aarch64, grafana13.1-13.1.1-0.2.hum1@src, grafana13.1-13.1.1-0.2.hum1@x86_64

Fixes 2 records

TI-2026-30467 CVE-2026-42127 · GHSA-3w66-95m3-8jxg

Pre-authentication denial of service in the public dashboard query endpoint

LOW 39

The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00432 Published 2026-06-22 Partial fix · 1.9.2-0.20260616075434-82ef13993059 CWE-400

TI-2026-40928 CVE-2026-56764 · GHSA-98q5-3v5r-qvfh

Hono - Timing Attack in basicAuth and bearerAuth Middleware

LOW 28

Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual function.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00297 Published 2026-07-15 Partial fix · 4.11.10 CWE-208