TI-2026-36071 CVE-2026-48801 · GHSA-22p9-wv53-3rq4
linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop
Priority HIGH 77
linkify-it is a links recognition library with full Unicode support.
RHSA-2026:60446
OpenShift Container Platform 4.20.36 bug fix and security update
Released 2026-09-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/egress-router-cni-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-azure-cluster-api-controllers-rhel9 +18
Fixes 11 records
TI-2026-10456 CVE-2026-12143 · GHSA-hmw2-7cc7-3qxx
form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)
Priority HIGH 77
form-data is a library for creating readable multipart/form-data streams.
TI-2026-51656 CVE-2026-73566 · GHSA-r292-9mhp-454m
Uncontrolled resource consumption in isaacs node-tar
Priority HIGH 72
node-tar is a tar archive manipulation library for Node.js.
TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m
js-yaml: YAML merge-key chains can force quadratic CPU consumption
Priority HIGH 72
js-yaml is a JavaScript YAML parser and dumper.
TI-2026-26186 CVE-2026-33814
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
TI-2026-34256 CVE-2026-46597 · GHSA-q4h4-gmj2-qvw2
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
Priority LOW 39
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
TI-2026-31183 CVE-2026-43003 · GHSA-rmxr-45gj-889w
OS command injection in OpenStack ironic-python-agent
Priority LOW 39
An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0.
TI-2026-28711 CVE-2026-39829 · GHSA-w879-237q-wc7r
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
Priority LOW 39
The RSA and DSA public key parsers did not enforce size limits on key parameters.
TI-2026-39299 CVE-2026-54423 · GHSA-vxvx-hwwh-pp7c
In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using…
Priority LOW 35
In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's a…
TI-2026-51293 CVE-2026-73086 · GHSA-xwg4-73v4-xw9w
nanoid: Integer Overflow or Wraparound
Priority LOW 34
nanoid is a secure, URL-friendly, unique string ID generator for JavaScript.
TI-2026-47061 CVE-2026-66138 · GHSA-wj9f-vqw7-855c
OS command injection in OpenStack Ironic Python Agent
Priority LOW 34
In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the…