Red Hat Security Advisory

RHSA-2026:8501

Technical preview of the satellite/iop-vulnerability-frontend-rhel9 container image

Released 2026-04-16 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vulnerability-frontend-rhel9

TI-2026-28989 CVE-2026-40175 · GHSA-fvcv-3m26-pcqx

MEDIUM 57

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.01979 Published 2026-04-10 Partial fix · 1.15.0, 0.31.0 CWE-113

TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99

MEDIUM 50

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02922 Published 2026-01-07 Partial fix · 2.6.3 CWE-409

TI-2026-20739 CVE-2026-25639 · GHSA-43fc-jf86-j433

MEDIUM 44

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02759 Published 2026-02-09 Partial fix · 1.13.5, 0.30.3 CWE-754