TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m
js-yaml: YAML merge-key chains can force quadratic CPU consumption
Priority HIGH 72
js-yaml is a JavaScript YAML parser and dumper.
RHSA-2026:48913
RHACS 4.10.6 security and bug fix update
Released 2026-07-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4.10 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator
Fixes 7 records
TI-2026-36927 CVE-2026-50163 · GHSA-fxhp-mv3v-67qp
Path traversal in oras-project oras-go
Priority MEDIUM 64
oras-go is a Go library for managing OCI artifacts.
TI-2026-36811 CVE-2026-49978 · GHSA-rp9w-3fw7-7cwq
DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content
Priority MEDIUM 61
DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.
TI-2026-11166 CVE-2026-13149 · GHSA-3jxr-9vmj-r5cp
Uncontrolled resource consumption in juliangruber brace-expansion
Priority MEDIUM 40
brace-expansion through 5.0.6 is vulnerable to denial of service.
TI-2026-36632 CVE-2026-49478 · GHSA-f5mr-q85p-6hh6
Server-side request forgery in sigstore fulcio
Priority LOW 39
Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.
TI-2026-38569 CVE-2026-53492 · GHSA-33vj-92qq-66hc
containerd CRI checkpoint restore CDI annotation smuggling
Priority LOW 36
containerd is an open-source container runtime.
TI-2026-30292 CVE-2026-41889 · GHSA-j88v-2chj-qfwx
pgx: SQL Injection via placeholder confusion with dollar quoted string literals
Priority LOW 12
pgx is a PostgreSQL driver and toolkit for Go.