Red Hat Security AdvisoryRHSA-2026:54436
Red Hat Hardened Images RPMs Security Update
Released 2026-08-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images nodejs22-1:22.23.2-2.3.2.hum1@aarch64, nodejs22-1:22.23.2-2.3.2.hum1@src, nodejs22-1:22.23.2-2.3.2.hum1@x86_64 +16
Fixes 2 records
Priority HIGH 72
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00647 · Published 2026-08-03 · Partial fix · 1.1.18, 2.1.4 +2 CWE-400
Priority LOW 17
A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that rebuild outbound headers from the visible `IncomingMessage` headers while piping the original body to a reused…
CVSS 3.0LOW 3.7· Network · No auth · No interaction · EPSS 0.00271 · Published 2026-09-01 · Partial fix CWE-444
