RHSA-2026:65852

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.

sqlparse is a non-validating SQL parser module for Python.

js-yaml is a JavaScript YAML parser and dumper.

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0.

The RSA and DSA public key parsers did not enforce size limits on key parameters.

In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's a…

In OpenStack Ironic Python Agent through 11.6.0, a project-scoped user with the manager role can achieve arbitrary code execution on a running Ironic-Python-Agent via a maliciously constructed configuration, because the…

A flaw was found in the OpenShift Router.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

OpenStack Ironic through before 37.0.1 allows creation or modification of nodes cross-project without authorization.

HashiCorp memberlist before version 0.6.0 is vulnerable to a denial-of-service issue in its push/pull state handling that may allow an attacker with network access to the gossip port to exhaust memory on a receiving node…