TI-2026-48543 CVE-2026-69198 · GHSA-4xrf-jv44-h6hh
Improper input validation in beaugunderson ip-address
Priority MEDIUM 64
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.
RHSA-2026:49401
Red Hat Hardened Images RPMs Security Update
Released 2026-08-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana12.4-12.4.6-0.3.hum1@aarch64, grafana12.4-12.4.6-0.3.hum1@src, grafana12.4-12.4.6-0.3.hum1@x86_64
Fixes 3 records
TI-2026-47615 CVE-2026-67319 · GHSA-7q8q-rj6j-mhjq
axios before 0.33.0 Prototype Pollution via nested option objects
Priority MEDIUM 61
axios before 0.33.0 (and 1.x before 1.18.0) can consume inherited properties from nested request option objects when the JavaScript process's Object.prototype has already been polluted by another component.
TI-2026-15158 CVE-2026-18446 · GHSA-7p8r-x3mc-p8w7
fast-uri vulnerable to host confusion via backslash authority introducer
Priority LOW 39
fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it (backslash backslash, forward slash backs…