Red Hat Security Advisory

RHSA-2026:62544

Red Hat Hardened Images RPMs Security Update

Released 2026-09-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images grafana13.1-13.1.3-0.4.hum1@aarch64, grafana13.1-13.1.3-0.4.hum1@src, grafana13.1-13.1.3-0.4.hum1@x86_64

Fixes 2 records

TI-2026-56824 CVE-2026-82417 · GHSA-4mjr-xmp4-gh2g

qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property

HIGH 67

### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00396 Published 2026-08-29 Partial fix · 6.16.0 CWE-248

TI-2026-56916 CVE-2026-82562 · GHSA-x5fp-wj9c-mxmx

Resource allocation without limits in ljharb qs

MEDIUM 61

### Summary When `qs.parse` is called with `comma: true` and `throwOnLimitExceeded: true`, a comma-separated value under a bracket-push key (`a[]=1,2,3,4`) is split into an array without being compared against `arrayLimi…

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0054 Published 2026-08-29 Partial fix · 6.16.0 CWE-770