Red Hat Security AdvisoryRHSA-2026:7128
RHACS 4.9.5 security and bug fix update
Released 2026-04-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Security 4.9 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-rhel8-operator, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8 +1
Fixes 11 records
Priority HIGH 79
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00527 · Published 2026-02-20 · Partial fix · 5.3.5, 4.5.4 CWE-185
Priority HIGH 77
jsPDF is a library to generate PDFs in JavaScript.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0084 · Published 2026-02-19 · Fixed in 4.2.0 CWE-400
Priority HIGH 72
fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00612 · Published 2026-03-20 · Partial fix · 5.5.6, 4.5.5 CWE-776
Priority HIGH 72
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00612 · Published 2026-01-30 · Partial fix · 5.3.4 CWE-20
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01619 · Published 2026-03-20 · Partial fix · 1.79.3 CWE-285
Priority MEDIUM 43
jsPDF is a library to generate PDFs in JavaScript.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.0028 · Published 2026-03-18 · Fixed in 4.2.1 CWE-79
Priority MEDIUM 42
jsPDF is a library to generate PDFs in JavaScript.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00952 · Published 2026-02-19 · Fixed in 4.2.0 CWE-116
Priority MEDIUM 41
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00937 · Published 2026-02-19 · Partial fix · 5.3.6, 4.5.4 CWE-776
Priority LOW 38
jsPDF is a library to generate PDFs in JavaScript.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00499 · Published 2026-02-19 · Fixed in 4.2.0 CWE-116
Priority LOW 37
jsPDF is a library to generate PDFs in JavaScript.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00378 · Published 2026-03-18 · Fixed in 4.2.1 CWE-116
Priority LOW 14
fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.00543 · Published 2026-02-26 · Partial fix · 5.3.8, 4.5.4 CWE-120
THREATIST.IORead the docs