TI-2026-51613 CVE-2026-73501
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
Priority HIGH 80
kin-openapi is a Go project for handling OpenAPI files.
RHSA-2026:60866
Red Hat Hardened Images RPMs Security Update
Released 2026-08-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana12.4-12.4.9-0.4.hum1@aarch64, grafana12.4-12.4.9-0.4.hum1@src, grafana12.4-12.4.9-0.4.hum1@x86_64
Fixes 6 records
TI-2026-56916 CVE-2026-82562 · GHSA-x5fp-wj9c-mxmx
Resource allocation without limits in ljharb qs
Priority MEDIUM 61
### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimi…
TI-2026-53157 CVE-2026-75931 · GHSA-5jgf-p345-68v8
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Priority LOW 39
fast-uri is a URI parser for Node.js.
TI-2026-53285 CVE-2026-76172 · GHSA-jqff-g426-hqxp
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
Priority LOW 38
fast-uri is a URI parser for Node.js.
TI-2026-53188 CVE-2026-75975 · GHSA-f65p-4m7j-42xc
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
Priority LOW 38
fast-uri is a URI parser for Node.js.
TI-2026-53132 CVE-2026-75899 · GHSA-fph4-wmhf-6fwf
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Priority LOW 38
fast-uri is a URI parser for Node.js.