TI-2026-79287 CVE-2026-111181 · GHSA-27r3-jxmh-p828
Crash in body-parser via trailing bytes after compressed request body
Priority LOW 39
body-parser is body parsing middleware for Node.js and Express.
RHSA-2026:90990
Red Hat Hardened Images RPMs Security Update
Released 2026-10-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana13.2-13.2.4-0.4.hum1@aarch64, grafana13.2-13.2.4-0.4.hum1@s390x, grafana13.2-13.2.4-0.4.hum1@src +1
Fixes 6 records
TI-2026-76744 CVE-2026-110306 · GHSA-w74x-v6f9-j3xg
URI scheme spoofing in fast-uri via percent-encoded scheme decoding
Priority LOW 27
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.
TI-2026-82091 CVE-2026-79656 · GHSA-jgwg-2rm4-8mgf
Grafana OAuth connectors write unredacted tokens to server logs
Priority LOW 26
A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in through the Generic OAuth, Google or GitLab provi…
TI-2026-76743 CVE-2026-110180 · GHSA-wjr9-j795-jxcr
Host confusion in fast-uri from unchecked host canonicalization
Priority LOW 22
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.
TI-2026-76745 CVE-2026-110725 · GHSA-333x-w4r6-6crp
Scheme injection in fast-uri via unescaped colon in suffix references
Priority LOW 17
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.
TI-2026-76742 CVE-2026-110095 · GHSA-xhq7-xmqj-769h
Improper path resolution in fast-uri relative reference normalization
Priority LOW 17
fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js.