Read the docs
Red Hat Security Advisory

RHSA-2026:90758

LVMS 4.14 Bug Fix and Enhancement update

Released 2026-10-27 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

Priority MEDIUM 40

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00568 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-400
Priority LOW 27

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0055 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-407