RHSA-2026:65126

Netty is an asynchronous, event-driven network application framework.

node-tar is a tar archive manipulation library for Node.js.

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references.

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete.

GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from().

node-tar is a tar archive manipulation library for Node.js.

GitPython is a python library used to interact with Git repositories.

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature.

GitPython is a python library used to interact with Git repositories.

js-yaml is a JavaScript YAML parser and dumper.

node-tar is a tar archive manipulation library for Node.js.

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools.

The brace-expansion library generates arbitrary strings containing a common prefix and suffix.

GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such as --exec/--upload-pack (leading to arbi…

js-yaml is a JavaScript YAML parser and dumper.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.

ws is an open source WebSocket client and server for Node.js.

basic-ftp is an FTP client for Node.js.

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

Netty is an asynchronous, event-driven network application framework.

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.

pyasn1 is a generic ASN.1 library for Python.

In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of characters consumed while parsing a single JSON document.

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations.

GitPython is a python library used to interact with Git repositories.

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs.

axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments.

ws is an open source WebSocket client and server for Node.js.

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint index…

OpenTelemetry-Go is the Go implementation of OpenTelemetry.

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation.

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The ExtensionLoader.instantiateExtension(Class, String) metho…

GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate.

Netty is an asynchronous, event-driven network application framework.

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.

A flaw was found in the `guardrails-detectors` component.

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.

Netty is an asynchronous, event-driven network application framework.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

React Router is a router for React.

Netty is a network application framework for development of protocol servers and clients.

Pillow is a Python imaging library.

minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.

GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values.

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on config-specified cache/covariance files wi…

Netty is a network application framework for development of protocol servers and clients.

A flaw was found in the Data Science Pipelines Operator (DSPO).

A flaw was found in the Data Science Pipelines Operator (DSPO).

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools.

pyasn1 is a generic ASN.1 library for Python.

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not.

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.

A flaw was found in the Data Science Pipelines Operator.

A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI).

brace-expansion through 5.0.6 is vulnerable to denial of service.

Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments.

Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin.

Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as `{a}{b}{c}:z`.

FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious byt…

Netty is a network application framework for development of protocol servers and clients.

Netty is a network application framework for development of protocol servers and clients.

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cro…

The RSA and DSA public key parsers did not enforce size limits on key parameters.

Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.

axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy.

Netty is an asynchronous, event-driven network application framework.

In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters.

A flaw was found in the TrustyAI Service (TAS) deployment.

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

FFmpeg through 8.1.2, fixed in commit 5d7112c, contains a heap out-of-bounds write vulnerability in the vf_hqdn3d filter that allows attackers to corrupt heap memory by supplying a crafted video whose frame resolution in…

baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

urllib3 is an HTTP client library for Python.

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects.

Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://).

A flaw was found in Data Science Pipelines (DSP).

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

A flaw was found in Data Science Pipelines.

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.

js-yaml is a JavaScript YAML parser and dumper.

Netty is a network application framework for development of protocol servers and clients.

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1 contain a plugin manager lock-rule enforcement bypass.

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead.

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate.