Red Hat Security Advisory

RHSA-2026:74633

Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image

Released 2026-10-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vulnerability-frontend-rhel9

TI-2026-58005 CVE-2026-84394 · GHSA-58mr-gqgx-xq4g

LOW 39

fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0038 Published 2026-09-02 Partial fix · 2.4.6, 3.1.7 +1 CWE-436

TI-2026-57933 CVE-2026-84292 · GHSA-qw65-cvwx-89v3

LOW 38

fast-uri serializes the port component of a URI without validating it.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00239 Published 2026-09-02 Partial fix · 2.4.6, 3.1.7 +1 CWE-116

TI-2026-53132 CVE-2026-75899 · GHSA-fph4-wmhf-6fwf

LOW 38

fast-uri is a URI parser for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0022 Published 2026-08-24 Partial fix · 2.4.5, 3.1.6 +1 CWE-174