Read the docs
Red Hat Security Advisory

RHSA-2026:89206

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-10-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 34

A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, such as fullwidth dig…

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.00304 Published 2026-10-23 Partial fix CWE-295