TI-2026-42687 CVE-2026-59873 · GHSA-23hp-3jrh-7fpw
node-tar: Decompression/parse DoS via unlimited input
Priority HIGH 79
node-tar is a tar archive manipulation library for Node.js.
RHSA-2026:51162
Red Hat Ansible Automation Platform 2.2 security update
Released 2026-08-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.2 registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9
Fixes 7 records
TI-2026-36071 CVE-2026-48801 · GHSA-22p9-wv53-3rq4
linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop
Priority HIGH 77
linkify-it is a links recognition library with full Unicode support.
TI-2026-32777 CVE-2026-44902 · GHSA-q7rr-3cgh-j5r3
opentelemetry-js: Prometheus exporter process crash via malformed HTTP request
Priority HIGH 72
opentelemetry-js is the OpenTelemetry JavaScript Client.
TI-2026-35509 CVE-2026-48068 · GHSA-5375-pq7m-f5r2
@grpc/grps-js: A malformed request can cause a server crash
Priority MEDIUM 41
@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon.
TI-2026-11166 CVE-2026-13149 · GHSA-3jxr-9vmj-r5cp
Uncontrolled resource consumption in juliangruber brace-expansion
Priority MEDIUM 40
brace-expansion through 5.0.6 is vulnerable to denial of service.
TI-2026-42691 CVE-2026-59877 · GHSA-j3f2-48v5-ccww
protobufjs: Denial of Service via infinite loop in .proto option parsing
Priority LOW 39
protobufjs compiles protobuf definitions into JavaScript (JS) functions.
TI-2026-33477 CVE-2026-45740 · GHSA-jggg-4jg4-v7c6
protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
Priority LOW 38
protobufjs compiles protobuf definitions into JavaScript (JS) functions.