Red Hat Security Advisory

RHSA-2026:5649

RHTAS 1.3.2 - Red Hat Trusted Artifact Signer Release

Released 2026-03-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/rhtas-console-rhel9, registry.redhat.io/rhtas/rhtas-console-ui-rhel9

TI-2026-21992 CVE-2026-27606 · GHSA-mw96-cpmx-2vgc

HIGH 79

Rollup is a module bundler for JavaScript.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.01651 Published 2026-02-25 Partial fix · 2.80.0, 3.30.0 +1 CWE-22

TI-2025-38128 CVE-2025-61726 · GHSA-gm9r-q53w-2gh4

MEDIUM 43

The net/url package does not set a limit on the number of query parameters in a query.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02292 Published 2026-01-28 Partial fix · 1.24.12, 1.25.6 CWE-770