Red Hat Security AdvisoryRHSA-2026:54440
Red Hat Lightspeed (formerly Insights) for Runtimes security update
Released 2026-08-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-agent-init-rhel9
Fixes 4 records
Priority HIGH 77
The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00463 · Published 2026-08-04 · Partial fix · 2.18.8, 2.21.4 +1 CWE-770
Priority HIGH 70
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01066 · Published 2026-06-23 · Partial fix · 2.18.8, 2.21.4 +1 CWE-184
Priority LOW 35
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00423 · Published 2026-07-14 · Partial fix · 2.18.8, 2.21.4 +1 CWE-915
Priority LOW 35
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00616 · Published 2026-06-23 · Partial fix · 2.14.0 CWE-400
THREATIST.IORead the docs