TI-2026-74664 CVE-2026-100353 · GHSA-vrcc-3ch7-hppw
Nil pointer panic in kin-openapi openapi3filter decoding
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
RHSA-2026:90388
Red Hat Hardened Images RPMs Security Update
Released 2026-10-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana12.4-12.4.13-0.4.hum1@aarch64, grafana12.4-12.4.13-0.4.hum1@src, grafana12.4-12.4.13-0.4.hum1@x86_64
Fixes 10 records
TI-2026-74663 CVE-2026-100352 · GHSA-rj39-cv6w-8wv7
YAML NaN and Inf values cause panic in kin-openapi validation
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74657 CVE-2026-100354 · GHSA-g8cf-rcjf-c8cf
Uncontrolled recursion in kin-openapi crashes the process
Priority HIGH 72
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-74516 CVE-2026-110816 · GHSA-6pq8-jhm2-2vcw
qs stringify throws TypeError on uncoercible array elements in comma format
Priority HIGH 67
### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as an object with an own non-callable `toStrin…
Priority MEDIUM 64
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows a remote attacker to exhaust a node's memory with a small crafted JWE token.
TI-2026-79287 CVE-2026-111181 · GHSA-27r3-jxmh-p828
Crash in body-parser via trailing bytes after compressed request body
Priority LOW 39
body-parser is body parsing middleware for Node.js and Express.
TI-2026-76744 CVE-2026-110306 · GHSA-w74x-v6f9-j3xg
URI scheme spoofing in fast-uri via percent-encoded scheme decoding
Priority LOW 27
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.
TI-2026-76743 CVE-2026-110180 · GHSA-wjr9-j795-jxcr
Host confusion in fast-uri from unchecked host canonicalization
Priority LOW 22
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.
TI-2026-76745 CVE-2026-110725 · GHSA-333x-w4r6-6crp
Scheme injection in fast-uri via unescaped colon in suffix references
Priority LOW 17
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.
TI-2026-76742 CVE-2026-110095 · GHSA-xhq7-xmqj-769h
Improper path resolution in fast-uri relative reference normalization
Priority LOW 17
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.