Red Hat Security AdvisoryRHSA-2026:63782
Red Hat Hardened Images RPMs Security Update
Released 2026-09-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana12.4-12.4.9-0.6.hum1@aarch64, grafana12.4-12.4.9-0.6.hum1@src, grafana12.4-12.4.9-0.6.hum1@x86_64
Fixes 4 records
Priority LOW 39
fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0038 · Published 2026-09-02 · Partial fix · 2.4.6, 3.1.7 +1 CWE-436
Priority LOW 38
fast-uri serializes the port component of a URI without validating it.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00239 · Published 2026-09-02 · Partial fix · 2.4.6, 3.1.7 +1 CWE-116
Priority LOW 34
undici 8.10.0 omits the destination origin from the cache and request-deduplication keys when the cache or deduplicate interceptor is composed directly onto a Client or Pool.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00164 · Published 2026-09-04 · Partial fix · 8.10.2 CWE-346
Priority LOW 27
undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00412 · Published 2026-09-04 · Partial fix · 6.28.1, 7.29.1 +1 CWE-248
THREATIST.IORead the docs