TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m
js-yaml: YAML merge-key chains can force quadratic CPU consumption
Priority HIGH 72
js-yaml is a JavaScript YAML parser and dumper.
RHSA-2026:68762
General availability of the satellite/iop-advisor-frontend-rhel9 container image
Released 2026-09-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-advisor-frontend-rhel9
Fixes 8 records
TI-2026-57986 CVE-2026-84375 · GHSA-2883-xcg3-v3hh
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources
Priority MEDIUM 40
js-yaml is a JavaScript YAML parser and dumper.
TI-2026-58005 CVE-2026-84394 · GHSA-58mr-gqgx-xq4g
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
Priority LOW 39
fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error.
TI-2026-53157 CVE-2026-75931 · GHSA-5jgf-p345-68v8
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Priority LOW 39
fast-uri is a URI parser for Node.js.
TI-2026-57933 CVE-2026-84292 · GHSA-qw65-cvwx-89v3
fast-uri vulnerable to authority injection via an unvalidated port in serialize
Priority LOW 38
fast-uri serializes the port component of a URI without validating it.
TI-2026-53285 CVE-2026-76172 · GHSA-jqff-g426-hqxp
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
Priority LOW 38
fast-uri is a URI parser for Node.js.
TI-2026-53188 CVE-2026-75975 · GHSA-f65p-4m7j-42xc
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
Priority LOW 38
fast-uri is a URI parser for Node.js.
TI-2026-53132 CVE-2026-75899 · GHSA-fph4-wmhf-6fwf
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Priority LOW 38
fast-uri is a URI parser for Node.js.