Red Hat Security Advisory

RHSA-2026:63357

General availability of the satellite/iop-remediations-rhel9 container image

Released 2026-09-03 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-48541 CVE-2026-69192 · GHSA-mwp4-54f8-5fhr

HIGH 75

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00465 Published 2026-08-03 Partial fix · 10.3.1 CWE-20

TI-2026-48532 CVE-2026-69152 · GHSA-rgw5-rvv9-x895

HIGH 72

The brace-expansion library generates arbitrary strings containing a common prefix and suffix.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00647 Published 2026-08-03 Partial fix · 1.1.18, 2.1.4 +2 CWE-400

TI-2026-11166 CVE-2026-13149 · GHSA-3jxr-9vmj-r5cp

MEDIUM 40

brace-expansion through 5.0.6 is vulnerable to denial of service.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00364 Published 2026-06-30 Partial fix · 5.0.7, 1.1.16 +1 CWE-400