Red Hat Security Advisory

RHSA-2026:84423

Red Hat Hardened Images RPMs Security Update

Released 2026-10-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images grafana13.1-13.1.7-0.2.hum1@aarch64, grafana13.1-13.1.7-0.2.hum1@s390x, grafana13.1-13.1.7-0.2.hum1@src +1

Fixes 2 records

TI-2026-71722 CVE-2026-109955 · GHSA-3g9q-qwv8-cxpf

Middleware bypass in Hono serveStatic via double path decoding

LOW 36

Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated attackers to skip prefix middleware by exploiting double path decoding.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00315 Published 2026-10-13 Partial fix · 4.13.11 CWE-174

TI-2026-76534 CVE-2026-111757 · GHSA-5r4p-p66f-jhc7

Double decoding in Hono serveStatic bypasses static prefix protection

LOW 30

Hono is a Web application framework that provides support for any JavaScript runtime.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0031 Published 2026-10-19 Partial fix · 4.13.11 CWE-174