Red Hat Security Advisory

RHSA-2026:95124

RHTAS 1.5.1 - Red Hat Trusted Artifact Signer Release

Released 2026-11-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Trusted Artifact Signer 1.5 registry.redhat.io/rhtas/rhtas-console-rhel9, registry.redhat.io/rhtas/rhtas-console-ui-rhel9

Fixes 10 records

TI-2026-74888 CVE-2026-109829 · GHSA-4w7w-5xrc-9h26

undici cache poisoning and cross-user disclosure via cross-origin redirects

MEDIUM 40

undici is an HTTP client library for Node.js.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00149 Published 2026-10-15 Partial fix · 7.30.1, 8.12.2 CWE-346

TI-2026-74886 CVE-2026-109383 · GHSA-2m5v-pch6-74hx

Certificate validation bypass in undici Agent drops custom TLS checks

MEDIUM 40

undici is an HTTP client library for Node.js.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00184 Published 2026-10-15 Partial fix · 6.29.1, 7.30.1 +1 CWE-295

TI-2026-26189 CVE-2026-33818 · GHSA-xc2p-8ggw-6cr5

Enforce maximum recursion depth in encoding/asn1

MEDIUM 40

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00568 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-400

TI-2026-74890 CVE-2026-109869 · GHSA-xjj6-f33q-929c

Unhandled error in undici fetch() crashes Node.js process

LOW 39

undici is an HTTP client library for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00344 Published 2026-10-15 Partial fix · 6.29.1, 7.30.1 +1 CWE-248

TI-2026-15892 CVE-2026-19534 · GHSA-rfgv-xxqx-mfg5

undici vulnerable to Denial of Service via unrequested WebSocket subprotocol

LOW 39

undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-09-04 Partial fix · 6.28.1, 7.29.1 +1 CWE-248

TI-2026-74992 CVE-2026-87018 · GHSA-qrxm-fqhp-jwvm

Denial of service in undici via TLS renegotiation

LOW 38

undici is an HTTP client library for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00187 Published 2026-10-15 Partial fix · 6.29.1, 7.30.1 +1 CWE-248

TI-2026-74894 CVE-2026-109932 · GHSA-9fm3-97px-rjf6

Undici WebSocket client exhausts memory via unbounded PONG buffering

LOW 33

undici is an HTTP client library for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00321 Published 2026-10-15 Partial fix · 6.29.1, 7.30.1 +1 CWE-400

TI-2026-74893 CVE-2026-109924 · GHSA-4qv8-2p9j-2685

Unbounded memory in undici EventSource parser allows denial of service

LOW 33

undici is an HTTP client library for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00321 Published 2026-10-15 Partial fix · 6.29.1, 7.30.1 +1 CWE-770

TI-2026-74993 CVE-2026-87029 · GHSA-55wc-3pg8-jfw6

Uncaught exception in undici decompress interceptor allows crashes

LOW 32

undici is an HTTP client library for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0026 Published 2026-10-15 Partial fix · 7.30.1, 8.12.2 CWE-248

TI-2026-74889 CVE-2026-109841 · GHSA-f72v-6w45-q472

Subresource Integrity bypass in undici fetch via mixed-case tokens

LOW 32

undici is an HTTP client library for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00252 Published 2026-10-15 Partial fix · 7.30.1, 8.12.2 CWE-178