Red Hat Security Advisory

RHSA-2026:59360

Apicurio Registry (container images) release and security update [ 3.3.1 GA ]

Released 2026-08-25 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-32430 CVE-2026-44496 · GHSA-hfxv-24rg-xrqf

HIGH 72

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05405 Published 2026-06-11 Partial fix · 1.16.0, 0.32.0 CWE-1333

TI-2026-36811 CVE-2026-49978 · GHSA-rp9w-3fw7-7cwq

MEDIUM 61

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00404 Published 2026-07-14 Partial fix · 3.4.6, 3.4.7 CWE-79

TI-2026-29849 CVE-2026-41240 · GHSA-h7mw-gpvr-xq4m

MEDIUM 60

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00313 Published 2026-04-23 Partial fix · 3.4.0 CWE-183

TI-2026-11039 CVE-2026-12975 · GHSA-7g64-f2hm-vjxp

LOW 37

A flaw was found in Apicurio Registry.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00437 Published 2026-06-25 Fixed in 3.3.1, 3.2.6 CWE-611

TI-2026-11054 CVE-2026-12992 · GHSA-rcmh-vfq7-8gf4

LOW 32

A flaw was found in Apicurio Registry.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00338 Published 2026-06-25 Fixed in 3.3.1, 3.2.6 CWE-918

TI-2026-11055 CVE-2026-12993 · GHSA-748j-wm96-4wh5

LOW 29

A flaw was found in Apicurio Registry.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00519 Published 2026-06-25 Fixed in 3.3.1, 3.2.6 CWE-776