TI-2026-42693 CVE-2026-59879 · GHSA-v56q-mh7h-f735
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS
Priority HIGH 77
Immutable.js provides many Persistent Immutable data structures.
RHSA-2026:74435
OpenShift Container Platform 4.19.50 security and extras update
Released 2026-10-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/kube-compare-artifacts-rhel9, registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-cluster-nfd-rhel9-operator
Fixes 6 records
TI-2026-26186 CVE-2026-33814
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
TI-2026-58005 CVE-2026-84394 · GHSA-58mr-gqgx-xq4g
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
Priority LOW 39
fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error.
TI-2026-53157 CVE-2026-75931 · GHSA-5jgf-p345-68v8
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Priority LOW 39
fast-uri is a URI parser for Node.js.
TI-2026-57933 CVE-2026-84292 · GHSA-qw65-cvwx-89v3
fast-uri vulnerable to authority injection via an unvalidated port in serialize
Priority LOW 38
fast-uri serializes the port component of a URI without validating it.
TI-2026-59480 CVE-2026-87114 · GHSA-c73r-9gcf-qjwr
Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo
Priority LOW 33
A flaw was found in kube-compare.