Red Hat Security AdvisoryRHSA-2026:95466
dogtag-pki security update
Released 2026-11-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) dogtag-pki-11.6.0-3.el10_0.2, idm-pki-acme-11.6.0-3.el10_0.2, idm-pki-base-11.6.0-3.el10_0.2 +6
Fixes 3 records
Priority HIGH 72
NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stringified numbers" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_F…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00628 · Published 2026-09-22 · Partial fix · 2.18.11, 2.21.7 +3 CWE-1333
Priority HIGH 72
A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0153 · Published 2026-09-18 · Partial fix · 6.2.19.Final, 7.0.5.Final +6 CWE-409
Priority HIGH 66
A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Crede…
CVSS 3.1HIGH 7.4· Network · No auth · User interaction · EPSS 0.00474 · Published 2026-09-18 · Partial fix · 6.2.19.Final, 7.0.5.Final +6 CWE-346
