Red Hat Security Advisory

RHSA-2026:73655

Red Hat Hardened Images RPMs Security Update

Released 2026-09-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images grafana13.1-13.1.6-0.5.hum1@aarch64, grafana13.1-13.1.6-0.5.hum1@src, grafana13.1-13.1.6-0.5.hum1@x86_64

Fixes 3 records

TI-2026-53275 CVE-2026-76154 · GHSA-35gc-393c-vjxf

CVE-2026-76154 CVE Record

LOW 34

A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuratio…

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00353 Published 2026-09-17 Partial fix CWE-79

TI-2026-56467 CVE-2026-81842 · GHSA-37j9-5rxj-3hwp

Library panel can be moved into a folder without library panel create permission

LOW 19

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00198 Published 2026-09-29 Partial fix · 12.4.12, 13.0.10 CWE-863

TI-2026-63240 CVE-2026-93981 · GHSA-hxh3-vqpv-xpqv

hono/jsx before 4.13.7 Cross-Site Scripting via Unescaped Strings

LOW 11

hono before 4.13.7 fails to HTML-escape plain strings rendered by hono/jsx as a child or fallback of Suspense, as a string child of ErrorBoundary alongside an asynchronous sibling, as the single child of a Context.Provid…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00227 Published 2026-09-19 Partial fix · 4.13.7 CWE-79