Red Hat Security Advisory

RHSA-2026:50290

Red Hat Hardened Images RPMs Security Update

Released 2026-08-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images grafana12.4-12.4.6-0.4.hum1@aarch64, grafana12.4-12.4.6-0.4.hum1@src, grafana12.4-12.4.6-0.4.hum1@x86_64

TI-2026-48532 CVE-2026-69152 · GHSA-rgw5-rvv9-x895

HIGH 72

The brace-expansion library generates arbitrary strings containing a common prefix and suffix.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00647 Published 2026-08-03 Partial fix · 1.1.18, 2.1.4 +2 CWE-400

TI-2026-48533 CVE-2026-69153 · GHSA-fxqj-rqcc-2cmp

MEDIUM 61

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00451 Published 2026-08-03 Partial fix · 8.5.19, 8.5.23 CWE-200

TI-2026-12072 CVE-2026-14257 · GHSA-mh99-v99m-4gvg

MEDIUM 40

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00643 Published 2026-07-23 Partial fix · 5.0.8, 3.0.3 +2 CWE-400