Vulnerability-Lookup

RHSA-2026:61735

Vulnerability from csaf_redhat - Published: 2026-08-31 15:37 - Updated: 2026-09-03 21:26

Summary

Red Hat Security Advisory: Red Hat Developer Hub 1.10.4 Plugin Catalog GA plugins release.

Severity

Important

Notes

Topic: Red Hat Developer Hub 1.10.4 Plugin Catalog GA plugins release.

Details: Red Hat Developer Hub (RHDH) is extensible by the plugins included herein.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-69192

A flaw was found in the `ip-address` library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass security measures like Server-Side Request Forgery (SSRF) filters and potentially gain unauthorized access to internal systems.

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

CWE-1389 - Incorrect Parsing of Numbers with Different Radices

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64	—	Vendor Fix fix Workaround
Unresolved product id: Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

38 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:61735	self
https://access.redhat.com/security/cve/CVE-2026-69152	external
https://access.redhat.com/security/cve/CVE-2026-69192	external
https://access.redhat.com/security/updates/classi…	external
https://catalog.redhat.com/search?gs&searchType=c…	external
https://developers.redhat.com/rhdh/overview	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://redhat.atlassian.net/browse/RHIDP-15975	external
https://redhat.atlassian.net/browse/RHIDP-15976	external
https://redhat.atlassian.net/browse/RHIDP-15977	external
https://redhat.atlassian.net/browse/RHIDP-15978	external
https://redhat.atlassian.net/browse/RHIDP-15979	external
https://redhat.atlassian.net/browse/RHIDP-15980	external
https://redhat.atlassian.net/browse/RHIDP-15983	external
https://redhat.atlassian.net/browse/RHIDP-15984	external
https://redhat.atlassian.net/browse/RHIDP-15985	external
https://redhat.atlassian.net/browse/RHIDP-15986	external
https://redhat.atlassian.net/browse/RHIDP-15987	external
https://redhat.atlassian.net/browse/RHIDP-15988	external
https://redhat.atlassian.net/browse/RHIDP-15989	external
https://redhat.atlassian.net/browse/RHIDP-15990	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-69152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722	external
https://www.cve.org/CVERecord?id=CVE-2026-69152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-69192	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510801	external
https://www.cve.org/CVERecord?id=CVE-2026-69192	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69192	external
https://github.com/beaugunderson/ip-address/commi…	external
https://github.com/beaugunderson/ip-address/relea…	external
https://github.com/beaugunderson/ip-address/secur…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat Developer Hub 1.10.4 Plugin Catalog GA plugins release.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat Developer Hub (RHDH) is extensible by the plugins included herein.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:61735",
        "url": "https://access.redhat.com/errata/RHSA-2026:61735"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-69192",
        "url": "https://access.redhat.com/security/cve/CVE-2026-69192"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh",
        "url": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh"
      },
      {
        "category": "external",
        "summary": "https://developers.redhat.com/rhdh/overview",
        "url": "https://developers.redhat.com/rhdh/overview"
      },
      {
        "category": "external",
        "summary": "https://docs.redhat.com/en/documentation/red_hat_developer_hub",
        "url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15975",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15975"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15976",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15976"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15977",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15977"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15978",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15978"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15979",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15979"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15980",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15980"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15983",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15983"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15984",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15984"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15985",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15985"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15986",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15986"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15987",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15987"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15988",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15988"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15989",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15989"
      },
      {
        "category": "external",
        "summary": "https://redhat.atlassian.net/browse/RHIDP-15990",
        "url": "https://redhat.atlassian.net/browse/RHIDP-15990"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61735.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Developer Hub 1.10.4 Plugin Catalog GA plugins release.",
    "tracking": {
      "current_release_date": "2026-09-03T21:26:28+00:00",
      "generator": {
        "date": "2026-09-03T21:26:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:61735",
      "initial_release_date": "2026-08-31T15:37:13+00:00",
      "revision_history": [
        {
          "date": "2026-08-31T15:37:13+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-31T15:37:36+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-03T21:26:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Developer Hub 1.10",
                "product": {
                  "name": "Red Hat Developer Hub 1.10",
                  "product_id": "Red Hat Developer Hub 1.10",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhdh:1.10::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Developer Hub"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
                  "product_id": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/red-hat-developer-hub-backstage-plugin-lightspeed@sha256%3Aabd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed\u0026tag=1788187400"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
                  "product_id": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256%3A8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend\u0026tag=1788186854"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
                  "product_id": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/red-hat-developer-hub-backstage-plugin-orchestrator@sha256%3Ab7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator\u0026tag=1788186989"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
                  "product_id": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256%3A96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend\u0026tag=1788187326"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
                  "product_id": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256%3A357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki\u0026tag=1788187449"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
                  "product_id": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256%3A38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets\u0026tag=1788186625"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64",
                "product": {
                  "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64",
                  "product_id": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256%3Aec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator\u0026tag=1788187032"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64 as a component of Red Hat Developer Hub 1.10",
          "product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64 as a component of Red Hat Developer Hub 1.10",
          "product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64 as a component of Red Hat Developer Hub 1.10",
          "product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64 as a component of Red Hat Developer Hub 1.10",
          "product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64 as a component of Red Hat Developer Hub 1.10",
          "product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64 as a component of Red Hat Developer Hub 1.10",
          "product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.10"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64 as a component of Red Hat Developer Hub 1.10",
          "product_id": "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
        },
        "product_reference": "registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64",
        "relates_to_product_reference": "Red Hat Developer Hub 1.10"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-69152",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-08-03T18:01:13.566423+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510722"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510722",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        }
      ],
      "release_date": "2026-08-03T16:33:36.324000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-31T15:37:13+00:00",
          "details": "For more about Red Hat Developer Hub, see References links",
          "product_ids": [
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61735"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
          "product_ids": [
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    },
    {
      "cve": "CVE-2026-69192",
      "cwe": {
        "id": "CWE-1389",
        "name": "Incorrect Parsing of Numbers with Different Radices"
      },
      "discovery_date": "2026-08-03T21:02:17.374935+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2510801"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the `ip-address` library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass security measures like Server-Side Request Forgery (SSRF) filters and potentially gain unauthorized access to internal systems.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in the `ip-address` JavaScript library can lead to Server-Side Request Forgery (SSRF) and trust-boundary bypass. The library\u0027s inconsistent parsing of IP address octets with leading zeros, which it interprets as decimal while the network stack interprets them as octal, can cause applications to misclassify internal IP addresses as external. This discrepancy can bypass security filters designed to prevent access to internal resources.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
          "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-69192"
        },
        {
          "category": "external",
          "summary": "RHBZ#2510801",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510801"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-69192",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-69192"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69192",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69192"
        },
        {
          "category": "external",
          "summary": "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e",
          "url": "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e"
        },
        {
          "category": "external",
          "summary": "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1",
          "url": "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr",
          "url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr"
        }
      ],
      "release_date": "2026-08-03T19:56:13.640000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-31T15:37:13+00:00",
          "details": "For more about Red Hat Developer Hub, see References links",
          "product_ids": [
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:61735"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:8de2810bb50af658ce3dd3b5a83bcc11bea738da6b1aeb637501e26b6522ca25_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:abd10cdcc70ca710d0c18baa0913792100eeb8d8554c1359ed1a29d2ba3f8c77_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:357988e253b0a3b0ff8d3b77dc5886366faaebbd58e9695e1d7fb325dcd008c5_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:96846b52574b28705e69ffcf4989780852535526a7859adc28f9842d83f50a92_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:38075c2bb77292114b40feab48aa875a9e03f4d9940c2e67d1fe05badaece7b4_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:b7558e8f25c8ae3f5076b415cfb7fa5ae07a992d54760b85a67732ee17adb896_amd64",
            "Red Hat Developer Hub 1.10:registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:ec7c7c800a638cc921df413df3e43fc3e7e41d4b304d519ff3393ecc1c8eb174_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass"
    }
  ]
}

CVE-2026-69152 (GCVE-0-2026-69152)

Vulnerability from cvelistv5 – Published: 2026-08-03 16:33 – Updated: 2026-08-03 20:12

Title

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

Summary

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-03 20:11 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption
CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/juliangruber/brace-expansion/s…	x_refsource_CONFIRM
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC
https://github.com/juliangruber/brace-expansion/c…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
juliangruber	brace-expansion	Affected: < 1.1.18 Affected: >= 2.0.0, < 2.1.4 Affected: >= 3.0.0, < 3.0.6 Affected: >= 4.0.0, < 5.0.9

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-69152",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-03T20:11:59.381371Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-03T20:12:20.435Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "brace-expansion",
          "vendor": "juliangruber",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.1.18"
            },
            {
              "status": "affected",
              "version": "\u003e= 2.0.0, \u003c 2.1.4"
            },
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.0.6"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 5.0.9"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T16:33:36.324Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
        },
        {
          "name": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
        }
      ],
      "source": {
        "advisory": "GHSA-rgw5-rvv9-x895",
        "discovery": "UNKNOWN"
      },
      "title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-69152",
    "datePublished": "2026-08-03T16:33:36.324Z",
    "dateReserved": "2026-08-03T15:47:09.654Z",
    "dateUpdated": "2026-08-03T20:12:20.435Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-69192 (GCVE-0-2026-69192)

Vulnerability from cvelistv5 – Published: 2026-08-03 19:56 – Updated: 2026-08-04 13:59

Title

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass

Summary

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo all decode a leading zero as octal. The library and the network stack therefore disagree about which host a string names. new Address4('012.0.0.1') reports correctForm() of 12.0.0.1 and isPrivate() of false, but fetch('http://012.0.0.1/') connects to 10.0.0.1. An application that builds a network trust-boundary decision on these checks, for example a filter intended to block Server-Side Request Forgery, or SSRF, will classify an internal target as external and allow the request. The defect is in the parse gate rather than in any one classifier, so every consumer of Address4 inherits it: isPrivate(), isLoopback(), isLinkLocal(), isCGNAT(), isInSubnet(), isHostInSubnet(), and correctForm() are all computed from the mis-decoded octets. This issue is fixed in version 10.3.1.

Severity

7.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-04 13:59 UTC

CWE

CWE-20 - Improper Input Validation
CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

GitHub_M mitre root

References

3 references

URL	Tags
https://github.com/beaugunderson/ip-address/secur…	x_refsource_CONFIRM
https://github.com/beaugunderson/ip-address/commi…	x_refsource_MISC
https://github.com/beaugunderson/ip-address/relea…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
beaugunderson	ip-address	Affected: < 10.3.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-69192",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-04T13:59:11.084723Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-04T13:59:43.294Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "ip-address",
          "vendor": "beaugunderson",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 10.3.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo all decode a leading zero as octal. The library and the network stack therefore disagree about which host a string names. new Address4(\u0027012.0.0.1\u0027) reports correctForm() of 12.0.0.1 and isPrivate() of false, but fetch(\u0027http://012.0.0.1/\u0027) connects to 10.0.0.1. An application that builds a network trust-boundary decision on these checks, for example a filter intended to block Server-Side Request Forgery, or SSRF, will classify an internal target as external and allow the request. The defect is in the parse gate rather than in any one classifier, so every consumer of Address4 inherits it: isPrivate(), isLoopback(), isLinkLocal(), isCGNAT(), isInSubnet(), isHostInSubnet(), and correctForm() are all computed from the mis-decoded octets. This issue is fixed in version 10.3.1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20: Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-03T19:56:13.640Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr"
        },
        {
          "name": "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e"
        },
        {
          "name": "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1"
        }
      ],
      "source": {
        "advisory": "GHSA-mwp4-54f8-5fhr",
        "discovery": "UNKNOWN"
      },
      "title": "ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-69192",
    "datePublished": "2026-08-03T19:56:13.640Z",
    "dateReserved": "2026-08-03T16:00:23.483Z",
    "dateUpdated": "2026-08-04T13:59:43.294Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2026:61735

CVE-2026-69152 (GCVE-0-2026-69152)

CVE-2026-69192 (GCVE-0-2026-69192)

Tags

Sightings

Nomenclature