Red Hat Security Advisory

RHSA-2026:51348

Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image

Released 2026-08-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vulnerability-frontend-rhel9

TI-2026-11539 CVE-2026-13676 · GHSA-4c8g-83qw-93j6

MEDIUM 40

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00692 Published 2026-06-29 Partial fix · 4.0.1, 3.1.3 +1 CWE-436

TI-2026-11166 CVE-2026-13149 · GHSA-3jxr-9vmj-r5cp

MEDIUM 40

brace-expansion through 5.0.6 is vulnerable to denial of service.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00364 Published 2026-06-30 Partial fix · 5.0.7, 1.1.16 +1 CWE-400

TI-2026-33553 CVE-2026-45822 · GHSA-vcc3-ghjq-m6fr

LOW 36

decode-uri-component through 0.4.1 is vulnerable to denial of service.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00507 Published 2026-06-30 Partial fix · 0.5.0 CWE-400