Read the docs
Red Hat Security Advisory

RHSA-2026:94794

Red Hat Hardened Images RPMs Security Update

Released 2026-11-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2026-80931 CVE-2026-116591 · GHSA-fpmh-frq8-7rj8

compress zstd: Panic on two-block frames

Priority MEDIUM 44

compress provides various compression algorithms.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00333 Published 2026-10-26 Partial fix · 1.20.2 CWE-190
Priority LOW 28

### Summary `qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even though keys are encoded by default.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00286 Published 2026-10-27 Partial fix · 6.12.6, 6.13.4 +3 CWE-116