TI-2026-66141 CVE-2026-104861 · GHSA-gjj5-9665-rwrc
probe-image-size: Quadratic-time Denial of Service in the SVG Parser
Priority HIGH 72
probe-image-size gets image dimensions without downloading the entire file.
RHSA-2026:91967
A Subscription Management tool for finding and reporting Red Hat product usage
Released 2026-10-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
Fixes 8 records
TI-2026-63115 CVE-2026-93749 · GHSA-68fv-2mgg-jv7q
source-map-js through 1.2.1 Event Loop Denial of Service
Priority MEDIUM 44
source-map-js through 1.2.1 fails to validate the per-section offset line value in indexed source maps, allowing attackers to specify arbitrary numeric values.
TI-2026-76527 CVE-2026-111064 · GHSA-5wr8-gcqf-gqf3
Missing initial request timeout in aiohttp server
Priority MEDIUM 42
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2026-65392 CVE-2026-102422 · GHSA-pqg4-j6r4-53mv
shell-quote `quote()` command injection via a line terminator in a token after a `{ comment }` token
Priority MEDIUM 42
shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token.
TI-2026-65313 CVE-2026-102278 · GHSA-qhr7-859c-m2p7
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
TI-2026-65311 CVE-2026-102276 · GHSA-6j4f-fj2g-mc7p
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
TI-2026-76529 CVE-2026-111066 · GHSA-9xw5-w5jj-pvcg
File descriptor exhaustion in AIOHTTP multipart request processing
Priority LOW 36
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2026-25663 CVE-2026-33245 · GHSA-8646-j5j9-6r62
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets
Priority LOW 34
React Router is a router for React.