Red Hat Security Advisory

RHSA-2026:71543

cockpit-image-builder security update

Released 2026-09-24 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-57933 CVE-2026-84292 · GHSA-qw65-cvwx-89v3

LOW 38

fast-uri serializes the port component of a URI without validating it.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00239 Published 2026-09-02 Partial fix · 2.4.6, 3.1.7 +1 CWE-116

TI-2026-53285 CVE-2026-76172 · GHSA-jqff-g426-hqxp

LOW 38

fast-uri is a URI parser for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00232 Published 2026-08-24 Partial fix · 2.4.5, 3.1.6 +1 CWE-177

TI-2026-53188 CVE-2026-75975 · GHSA-f65p-4m7j-42xc

LOW 38

fast-uri is a URI parser for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0022 Published 2026-08-24 Partial fix · 2.4.5, 3.1.6 +1 CWE-20

TI-2026-53132 CVE-2026-75899 · GHSA-fph4-wmhf-6fwf

LOW 38

fast-uri is a URI parser for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0022 Published 2026-08-24 Partial fix · 2.4.5, 3.1.6 +1 CWE-174