TI-2026-08342 CVE-2026-9496 · GHSA-w4pp-8pjf-rmxw
Regular expression denial of service in pacote
Priority HIGH 77
Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function.
RHSA-2026:92578
General availability of the satellite/iop-remediations-rhel9 container image
Released 2026-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.19 registry.redhat.io/satellite/iop-remediations-rhel9
Fixes 5 records
TI-2026-63932 CVE-2026-97057 · GHSA-xwx3-3p4h-ffw8
redis-parser through 3.0.0 Denial of Service via Invalid Array Length
Priority MEDIUM 44
redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP protocol parsing, allowing attackers to trigger an uncaught RangeError by supplying an excessively large declared length.
TI-2026-61668 CVE-2026-90711 · GHSA-jqcg-44mw-7w3h
proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
Priority MEDIUM 41
proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips.
TI-2026-65313 CVE-2026-102278 · GHSA-qhr7-859c-m2p7
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
TI-2026-65311 CVE-2026-102276 · GHSA-6j4f-fj2g-mc7p
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.