Red Hat Security Advisory

RHSA-2026:84431

Red Hat Hardened Images RPMs Security Update

Released 2026-10-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images grafana13.2-13.2.3-0.2.hum1@aarch64, grafana13.2-13.2.3-0.2.hum1@s390x, grafana13.2-13.2.3-0.2.hum1@src +1

Fixes 1 record

TI-2026-71722 CVE-2026-109955 · GHSA-3g9q-qwv8-cxpf

Middleware bypass in Hono serveStatic via double path decoding

LOW 36

Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated attackers to skip prefix middleware by exploiting double path decoding.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00315 Published 2026-10-13 Partial fix · 4.13.11 CWE-174