Red Hat Security AdvisoryRHSA-2026:67724
Migration Toolkit for Applications
Released 2026-09-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Migration Toolkit for Applications 8.2 registry.redhat.io/mta/mta-ui-rhel9
Fixes 4 records
Priority HIGH 72
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00647 · Published 2026-08-03 · Partial fix · 1.1.18, 2.1.4 +2 CWE-400
Priority HIGH 67
### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00396 · Published 2026-08-29 · Partial fix · 6.16.0 CWE-248
Priority MEDIUM 44
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00507 · Published 2026-08-13 · Partial fix · 5.10.1 CWE-776
Priority MEDIUM 40
js-yaml is a JavaScript YAML parser and dumper.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00541 · Published 2026-09-01 · Partial fix · 3.15.2, 4.3.2 +1 CWE-400
THREATIST.IORead the docs