Read the docs
Red Hat Security Advisory

RHSA-2026:95222

Ansible automation portal Red Hat Enterprise Linux Images

Released 2026-11-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

Priority MEDIUM 41

proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and it backs Express req.ip and req.ips.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0026 Published 2026-09-15 Partial fix · 2.0.8 CWE-290
TI-2026-65217 CVE-2026-101916 · GHSA-m9gg-hp2v-232j

Improper certificate validation in grpc-node

Priority LOW 34

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00215 Published 2026-09-28 Partial fix · 1.13.6, 1.14.5 CWE-295