Red Hat Security AdvisoryRHSA-2026:54183
Red Hat Hardened Images RPMs Security Update
Released 2026-08-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images nodejs24-1:24.18.1-0.2.1.hum1@aarch64, nodejs24-1:24.18.1-0.2.1.hum1@src, nodejs24-1:24.18.1-0.2.1.hum1@x86_64 +16
Fixes 2 records
Priority HIGH 72
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00647 · Published 2026-08-03 · Partial fix · 1.1.18, 2.1.4 +2 CWE-400
Priority MEDIUM 40
brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00643 · Published 2026-07-23 · Partial fix · 5.0.8, 3.0.3 +2 CWE-400
