Red Hat Security Advisory

RHSA-2026:70917

Red Hat Hardened Images RPMs Security Update

Released 2026-09-23 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images grafana12.4-12.4.10-0.7.hum1@aarch64, grafana12.4-12.4.10-0.7.hum1@src, grafana12.4-12.4.10-0.7.hum1@x86_64

Fixes 1 record

TI-2026-53084 CVE-2026-75838 · GHSA-748c-f84h-hp2v

DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook

MEDIUM 56

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00394 Published 2026-08-18 Partial fix · 3.4.13 CWE-79