Red Hat Security AdvisoryRHSA-2026:51196
General availability of the satellite/iop-host-inventory-frontend-rhel9 container image
Released 2026-08-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9
Fixes 3 records
Priority HIGH 75
ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.00684 · Published 2026-06-12 · Partial fix · 2.17.4 CWE-79
Priority MEDIUM 40
fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00692 · Published 2026-06-29 · Partial fix · 4.0.1, 3.1.3 +1 CWE-436
Priority MEDIUM 40
brace-expansion through 5.0.6 is vulnerable to denial of service.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00364 · Published 2026-06-30 · Partial fix · 5.0.7, 1.1.16 +1 CWE-400
