Red Hat Security Advisory

RHSA-2026:8568

New container image: rhceph-9.0

Released 2026-04-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Ceph Storage 9.0 registry.redhat.io/rhceph/rhceph-9-rhel9

Fixes 2 records

TI-2025-36987 CVE-2025-59436 · GHSA-qf5v-q897-m77r

Server-side request forgery in fedorindutny ip

MEDIUM 49

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic.

CVSS 3.1LOW 3.2 Local No auth No interaction EPSS 0.00124 Published 2025-09-16 Partial fix CWE-918

TI-2024-10975 CVE-2024-11831 · GHSA-76p7-773f-r4q5

Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript

LOW 27

A flaw was found in npm-serialize-javascript.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01122 Published 2025-02-10 Partial fix · 6.0.2, 4.4.8-2 +27 CWE-79