TI-2026-42693 CVE-2026-59879 · GHSA-v56q-mh7h-f735
Immutable.js `List` 32-bit trie overflow → unrecoverable DoS
Priority HIGH 77
Immutable.js provides many Persistent Immutable data structures.
RHSA-2026:93951
OpenShift Virtualization v4.17 Images
Released 2026-11-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Container Native Virtualization 4.17 registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9
Fixes 3 records
TI-2026-08149 CVE-2026-9277 · GHSA-w7jw-789q-3m8p
shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`
Priority MEDIUM 43
shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`.
TI-2026-57986 CVE-2026-84375 · GHSA-2883-xcg3-v3hh
js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources
Priority MEDIUM 40
js-yaml is a JavaScript YAML parser and dumper.