RHSA-2026:69248
Vulnerability from csaf_redhat - Published: 2026-09-21 07:52 - Updated: 2026-09-21 17:58Summary
Red Hat Security Advisory: Red Hat Developer Hub 1.9.9 release.
Severity
Important
Notes
Topic: Red Hat Developer Hub 1.9.9 has been released.
Details: Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64 | — | ||
| Unresolved product id: Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64 | — |
Threats
Impact
Important
A flaw was found in the `ip-address` library. This library, used for parsing and manipulating IPv4 and IPv6 addresses in JavaScript, is vulnerable to Server-Side Request Forgery (SSRF) due to incorrect classification of IPv4-mapped/NAT64 IPv6 addresses. An attacker could exploit this misclassification to bypass network restrictions and potentially access or manipulate internal resources. This vulnerability can be exploited on any dual-stack host for IPv4-mapped addresses, and for NAT64, it requires a NAT64/DNS64 gateway in the deployment network.
7.2 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Moderate
A flaw was found in urllib. This HTTP client for Node.js can be exploited by a remote attacker due to improper handling of cross-origin redirects. When following redirects, urllib reuses sensitive request headers, such as Authorization and Cookie, across different origins. This can lead to the leakage of credentials to an attacker-controlled server, potentially allowing the attacker to reuse these credentials against the original service.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-33818
Known not affected
2 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.
8.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-33818
Known not affected
2 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-33818
Known not affected
2 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-33818
Known not affected
2 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-33818
Known not affected
2 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in axios, a popular JavaScript library. An attacker can exploit this vulnerability by providing malicious form data containing deeply nested field names. This input triggers uncontrolled recursion within the formDataToJSON function, which is responsible for processing form data. The excessive recursion exhausts the application's JavaScript call stack, leading to a denial of service for the affected request or, in some cases, causing the entire application process to terminate.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in pymdown-extensions, a collection of extensions for the Python Markdown library. This vulnerability, known as a Regular Expression Denial of Service (ReDoS), arises from how certain inline processors handle regular expressions. An unauthenticated remote attacker can exploit this by submitting a short, untrusted Markdown line that causes the regular expression engine to perform an excessive number of calculations. This leads to unbounded CPU usage, effectively causing a denial of service for affected web applications or systems that process user-supplied Markdown.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in the `ip-address` library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass security measures like Server-Side Request Forgery (SSRF) filters and potentially gain unauthorized access to internal systems.
8.6 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in xmldom, a JavaScript XML DOM parser. The Element.setAttribute() function does not properly validate attribute names, allowing a remote attacker to inject specially crafted attribute names. This can lead to the injection of additional attributes, including event handlers, into browser-consumed output. Consequently, a remote attacker could achieve client-side script execution, such as Cross-Site Scripting (XSS), in the context of the affected application.
8.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. This vulnerability allows a remote attacker to inject malicious content, such as attributes or elements, into serialized XML or HTML documents. This occurs because the `Document.createElement()` function does not properly validate element names, and the `XMLSerializer.serializeToString()` function then outputs these unvalidated names directly. When these manipulated documents are processed by a web browser, it can lead to cross-site scripting (XSS), enabling attackers to execute arbitrary scripts in the user's browser.
8.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. A remote attacker can exploit this vulnerability by providing a specially crafted `DocumentType.name` containing characters like `>` or whitespace. This bypasses the `requireWellFormed` validation, allowing the injection of arbitrary XML markup. Such injection can lead to unintended modifications of the XML document structure, potentially resulting in arbitrary code execution or information disclosure within applications that process the affected XML.
CWE-91 - XML Injection (aka Blind XPath Injection)Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in xmldom, a JavaScript module for parsing XML (Extensible Markup Language) documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing an element with numerous distinct attributes. The way xmldom processes these attributes leads to a significant performance degradation, consuming excessive computational resources. This can cause the application using xmldom to become unresponsive, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in xmldom. Two independent quadratic paths in the XML DOM (Document Object Model) parser can lead to a denial of service (DoS). A remote attacker could exploit this by providing specially crafted XML input, causing the parser to repeatedly rescan malformed tag names or reindex and rebuild strings during normalization. This excessive processing consumes system resources, making the application unresponsive.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in xmldom, a JavaScript library for parsing XML documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document. When processed, this document would cause the library to consume an excessive amount of memory, leading to the application running out of resources and becoming unavailable, a condition known as Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. An attacker can exploit a vulnerability in how processing instructions are handled to inject arbitrary XML structures. This occurs because the software fails to properly validate input, allowing special characters to bypass security checks. Successful exploitation could lead to data manipulation or other integrity impacts within applications processing the affected XML.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in xmldom, a JavaScript module used for processing XML documents. A remote attacker could exploit a vulnerability in the XML parser by submitting a specially crafted XML input. This could lead to a Denial of Service (DoS), causing the affected system to become unresponsive by stalling the Node.js event loop. The vulnerability stems from a regular expression that processes end-tags inefficiently, consuming excessive resources.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
A flaw was found in undici's BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security (TLS) certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently, a peer with an otherwise untrusted certificate may be accepted, potentially compromising the integrity of secure communication.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-19534
Known not affected
2 products, the same list as for
CVE-2026-19534
Threats
Impact
Important
References
243 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Developer Hub 1.9.9 has been released.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Developer Hub (RHDH) is Red Hat\u0027s enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:69248",
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19534",
"url": "https://access.redhat.com/security/cve/CVE-2026-19534"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-54272",
"url": "https://access.redhat.com/security/cve/CVE-2026-54272"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55553",
"url": "https://access.redhat.com/security/cve/CVE-2026-55553"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67214",
"url": "https://access.redhat.com/security/cve/CVE-2026-67214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67312",
"url": "https://access.redhat.com/security/cve/CVE-2026-67312"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-67422",
"url": "https://access.redhat.com/security/cve/CVE-2026-67422"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69152",
"url": "https://access.redhat.com/security/cve/CVE-2026-69152"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-69192",
"url": "https://access.redhat.com/security/cve/CVE-2026-69192"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73086",
"url": "https://access.redhat.com/security/cve/CVE-2026-73086"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-75899",
"url": "https://access.redhat.com/security/cve/CVE-2026-75899"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-75931",
"url": "https://access.redhat.com/security/cve/CVE-2026-75931"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-75975",
"url": "https://access.redhat.com/security/cve/CVE-2026-75975"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-76172",
"url": "https://access.redhat.com/security/cve/CVE-2026-76172"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83605",
"url": "https://access.redhat.com/security/cve/CVE-2026-83605"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83607",
"url": "https://access.redhat.com/security/cve/CVE-2026-83607"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83608",
"url": "https://access.redhat.com/security/cve/CVE-2026-83608"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83613",
"url": "https://access.redhat.com/security/cve/CVE-2026-83613"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83614",
"url": "https://access.redhat.com/security/cve/CVE-2026-83614"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83615",
"url": "https://access.redhat.com/security/cve/CVE-2026-83615"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83616",
"url": "https://access.redhat.com/security/cve/CVE-2026-83616"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-83619",
"url": "https://access.redhat.com/security/cve/CVE-2026-83619"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84292",
"url": "https://access.redhat.com/security/cve/CVE-2026-84292"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84394",
"url": "https://access.redhat.com/security/cve/CVE-2026-84394"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84961",
"url": "https://access.redhat.com/security/cve/CVE-2026-84961"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh",
"url": "https://catalog.redhat.com/search?gs\u0026searchType=containers\u0026q=rhdh"
},
{
"category": "external",
"summary": "https://developers.redhat.com/rhdh/overview",
"url": "https://developers.redhat.com/rhdh/overview"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_developer_hub",
"url": "https://docs.redhat.com/en/documentation/red_hat_developer_hub"
},
{
"category": "external",
"summary": "https://issues.redhat.com/browse/RHDHBUGS-3741",
"url": "https://issues.redhat.com/browse/RHDHBUGS-3741"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69248.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Developer Hub 1.9.9 release.",
"tracking": {
"current_release_date": "2026-09-21T17:58:23+00:00",
"generator": {
"date": "2026-09-21T17:58:23+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:69248",
"initial_release_date": "2026-09-21T07:52:01+00:00",
"revision_history": [
{
"date": "2026-09-21T07:52:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-21T07:52:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-21T17:58:23+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Developer Hub 1.9",
"product": {
"name": "Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhdh:1.9::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Developer Hub"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-hub-rhel9@sha256%3Aea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9\u0026tag=1789554285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-rhel9-operator@sha256%3A036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-rhel9-operator\u0026tag=1789552931"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"product": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"product_id": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhdh-operator-bundle@sha256%3A1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc?arch=amd64\u0026repository_url=registry.redhat.io/rhdh/rhdh-operator-bundle\u0026tag=1789558887"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64 as a component of Red Hat Developer Hub 1.9",
"product_id": "Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
},
"product_reference": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64",
"relates_to_product_reference": "Red Hat Developer Hub 1.9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-19534",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-09-04T17:21:01.599799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via unrequested WebSocket subprotocol",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in undici\u0027s WebSocket client, which can lead to a Node.js process crash. The vulnerability is triggered when an application connects to a malicious or compromised server that responds with an unrequested WebSocket subprotocol, allowing a remote, unauthenticated attacker to cause a denial of service in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19534"
},
{
"category": "external",
"summary": "RHBZ#2528759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19534"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19534",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19534"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5"
}
],
"release_date": "2026-09-04T17:10:05.081000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via unrequested WebSocket subprotocol"
},
{
"cve": "CVE-2026-33818",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:12:37.151735+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "RHBZ#2515815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://go.dev/cl/814980",
"url": "https://go.dev/cl/814980"
},
{
"category": "external",
"summary": "https://go.dev/issue/80405",
"url": "https://go.dev/issue/80405"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5972",
"url": "https://pkg.go.dev/vuln/GO-2026-5972"
}
],
"release_date": "2026-08-13T21:58:52.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
},
{
"cve": "CVE-2026-54272",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-07-27T18:01:01.261883+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507593"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `ip-address` library. This library, used for parsing and manipulating IPv4 and IPv6 addresses in JavaScript, is vulnerable to Server-Side Request Forgery (SSRF) due to incorrect classification of IPv4-mapped/NAT64 IPv6 addresses. An attacker could exploit this misclassification to bypass network restrictions and potentially access or manipulate internal resources. This vulnerability can be exploited on any dual-stack host for IPv4-mapped addresses, and for NAT64, it requires a NAT64/DNS64 gateway in the deployment network.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a Moderate flaw where the `ip-address` JavaScript library incorrectly classifies IPv4-mapped or NAT64 IPv6 addresses. This misclassification can lead to Server-Side Request Forgery (SSRF), allowing an attacker to bypass intended network restrictions and access internal resources. Exploitation is possible on dual-stack hosts for IPv4-mapped addresses, while NAT64 exploitation requires a NAT64/DNS64 gateway.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54272"
},
{
"category": "external",
"summary": "RHBZ#2507593",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507593"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54272",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54272"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54272",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54272"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-22jq-vg5j-6vgg",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-22jq-vg5j-6vgg"
}
],
"release_date": "2026-07-27T17:13:09.244000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification"
},
{
"cve": "CVE-2026-55553",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-08-25T16:32:13.263310+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2523609"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib. This HTTP client for Node.js can be exploited by a remote attacker due to improper handling of cross-origin redirects. When following redirects, urllib reuses sensitive request headers, such as Authorization and Cookie, across different origins. This can lead to the leakage of credentials to an attacker-controlled server, potentially allowing the attacker to reuse these credentials against the original service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib: urllib: Credential leakage via cross-origin redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55553"
},
{
"category": "external",
"summary": "RHBZ#2523609",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523609"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55553",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55553"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55553",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55553"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/commit/7c86c465883ebd3dea5109c87d7bbe3b00960a16",
"url": "https://github.com/node-modules/urllib/commit/7c86c465883ebd3dea5109c87d7bbe3b00960a16"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/commit/811a8d56e64e540bf6a19bf8b3737692f05d5c46",
"url": "https://github.com/node-modules/urllib/commit/811a8d56e64e540bf6a19bf8b3737692f05d5c46"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/pull/812",
"url": "https://github.com/node-modules/urllib/pull/812"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/pull/813",
"url": "https://github.com/node-modules/urllib/pull/813"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/releases/tag/v2.44.1",
"url": "https://github.com/node-modules/urllib/releases/tag/v2.44.1"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/releases/tag/v4.9.1",
"url": "https://github.com/node-modules/urllib/releases/tag/v4.9.1"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/security/advisories/GHSA-hq3h-g68c-hp78",
"url": "https://github.com/node-modules/urllib/security/advisories/GHSA-hq3h-g68c-hp78"
}
],
"release_date": "2026-08-25T16:18:21.519000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib: urllib: Credential leakage via cross-origin redirects"
},
{
"cve": "CVE-2026-56853",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:14:53.561638+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "RHBZ#2515827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://go.dev/cl/795540",
"url": "https://go.dev/cl/795540"
},
{
"category": "external",
"summary": "https://go.dev/issue/80205",
"url": "https://go.dev/issue/80205"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6089",
"url": "https://pkg.go.dev/vuln/GO-2026-6089"
}
],
"release_date": "2026-08-13T21:58:53.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
},
{
"cve": "CVE-2026-56858",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-08-13T22:16:32.034590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515838"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "RHBZ#2515838",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://go.dev/cl/807100",
"url": "https://go.dev/cl/807100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80435",
"url": "https://go.dev/issue/80435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6091",
"url": "https://pkg.go.dev/vuln/GO-2026-6091"
}
],
"release_date": "2026-08-13T21:58:53.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
},
{
"cve": "CVE-2026-56859",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:16:52.493058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "RHBZ#2515840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://go.dev/cl/803320",
"url": "https://go.dev/cl/803320"
},
{
"category": "external",
"summary": "https://go.dev/issue/80481",
"url": "https://go.dev/issue/80481"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6088",
"url": "https://pkg.go.dev/vuln/GO-2026-6088"
}
],
"release_date": "2026-08-13T21:58:52.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
},
{
"cve": "CVE-2026-56860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:13:18.319384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "RHBZ#2515820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://go.dev/cl/803681",
"url": "https://go.dev/cl/803681"
},
{
"category": "external",
"summary": "https://go.dev/issue/80494",
"url": "https://go.dev/issue/80494"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6218",
"url": "https://pkg.go.dev/vuln/GO-2026-6218"
}
],
"release_date": "2026-08-13T21:58:53.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
},
{
"cve": "CVE-2026-56862",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-13T22:16:41.928450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "RHBZ#2515839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://go.dev/cl/804261",
"url": "https://go.dev/cl/804261"
},
{
"category": "external",
"summary": "https://go.dev/issue/80528",
"url": "https://go.dev/issue/80528"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6090",
"url": "https://pkg.go.dev/vuln/GO-2026-6090"
}
],
"release_date": "2026-08-13T21:58:53.216000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
},
{
"cve": "CVE-2026-67214",
"cwe": {
"id": "CWE-839",
"name": "Numeric Range Comparison Without Minimum Check"
},
"discovery_date": "2026-07-29T14:01:28.637584+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2508411"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nanoid (Nano ID), a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a negative size input to the customAlphabet or nanoid functions within the library\u0027s non-secure module. When a negative size is provided, these functions enter an infinite loop, causing the application to hang indefinitely and disrupting service availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An input validation flaw in Nano ID\u0027s non-secure module (`nanoid/non-secure`) causes an infinite loop in the `customAlphabet` and `nanoid` functions when processed with a negative size parameter. Because the decrementing loop counter never meets its termination condition, an unauthenticated attacker who passes an unvalidated negative integer value can block the NodeJS event loop, resulting in a thread hang and complete Denial of Service (DoS) for the host application.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67214"
},
{
"category": "external",
"summary": "RHBZ#2508411",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2508411"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67214"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67214"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49",
"url": "https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/5.1.16",
"url": "https://github.com/ai/nanoid/releases/tag/5.1.16"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module",
"url": "https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module"
}
],
"release_date": "2026-07-29T13:32:02.265000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Sanitize all user-supplied integer inputs before passing them to `nanoid` or `customAlphabet` functions in the `nanoid/non-secure` module, ensuring the size parameter is strictly a non-negative integer.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nanoid: nanoid: Denial of Service via negative size input in non-secure module functions"
},
{
"cve": "CVE-2026-67312",
"cwe": {
"id": "CWE-674",
"name": "Uncontrolled Recursion"
},
"discovery_date": "2026-08-01T13:02:36.502842+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510007"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in axios, a popular JavaScript library. An attacker can exploit this vulnerability by providing malicious form data containing deeply nested field names. This input triggers uncontrolled recursion within the formDataToJSON function, which is responsible for processing form data. The excessive recursion exhausts the application\u0027s JavaScript call stack, leading to a denial of service for the affected request or, in some cases, causing the entire application process to terminate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: axios: Denial of Service via uncontrolled recursion in form data processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the axios JavaScript library allows an unauthenticated remote attacker to cause a denial of service. By submitting crafted form data with excessively nested bracket-delimited field names, an attacker can trigger uncontrolled recursion in the formDataToJSON function (exposed as axios.formToJSON() and used internally by the default transformRequest when FormData is sent with Content-Type: application/json), exhausting the JavaScript call stack and causing a RangeError that may terminate the application process. This vulnerability affects applications that pass attacker-controlled FormData field names to axios\u0027 FormData-to-JSON conversion.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67312"
},
{
"category": "external",
"summary": "RHBZ#2510007",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510007"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67312",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67312"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67312",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67312"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pmv8-rq9r-6j72",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pmv8-rq9r-6j72"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-formtojson",
"url": "https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-formtojson"
}
],
"release_date": "2026-08-01T12:22:18.102000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Upgrade to axios \u003e= 1.18.0 (1.x) or \u003e= 0.33.0 (0.x), which add recursion depth guards to formDataToJSON. If an immediate upgrade is not possible, validate and limit the nesting depth of FormData field names before passing them to axios.formToJSON() or before sending FormData through axios with Content-Type: application/json, and ensure error handling is in place to catch RangeError exceptions from this code path.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: axios: Denial of Service via uncontrolled recursion in form data processing"
},
{
"cve": "CVE-2026-67422",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-08-06T22:29:11.176663+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2512322"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pymdown-extensions, a collection of extensions for the Python Markdown library. This vulnerability, known as a Regular Expression Denial of Service (ReDoS), arises from how certain inline processors handle regular expressions. An unauthenticated remote attacker can exploit this by submitting a short, untrusted Markdown line that causes the regular expression engine to perform an excessive number of calculations. This leads to unbounded CPU usage, effectively causing a denial of service for affected web applications or systems that process user-supplied Markdown.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pymdown-extensions: Pymdown-extensions: Denial of Service via Regular Expression Vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important as it enables an unauthenticated remote attacker to trigger a Regular Expression Denial of Service (ReDoS) in Red Hat products that render untrusted Markdown via `pymdown-extensions`. Catastrophic backtracking in specific inline processors can lead to excessive CPU usage and service disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-67422"
},
{
"category": "external",
"summary": "RHBZ#2512322",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512322"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-67422",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-67422"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-67422",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-67422"
},
{
"category": "external",
"summary": "https://github.com/facelessuser/pymdown-extensions/commit/c68498598d7b13011bb4571350b6e3612a4ce44b",
"url": "https://github.com/facelessuser/pymdown-extensions/commit/c68498598d7b13011bb4571350b6e3612a4ce44b"
},
{
"category": "external",
"summary": "https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw",
"url": "https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-gm37-52c6-37mw"
}
],
"release_date": "2026-08-06T20:26:31.930000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pymdown-extensions: Pymdown-extensions: Denial of Service via Regular Expression Vulnerability"
},
{
"cve": "CVE-2026-69152",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-03T18:01:13.566423+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510722"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Any applications that pass user-controlled input to the `expand()` function are vulnerable to this issue. This flaw can result in an excessive consumption of memory that eventually terminates the process or blocks the event loop, both causing a denial of service. As this vulnerability allows a remote attacker to cause a denial of service, it has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69152"
},
{
"category": "external",
"summary": "RHBZ#2510722",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510722"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69152",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69152"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69152"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
"url": "https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
"url": "https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
"url": "https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
"url": "https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
"url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895"
}
],
"release_date": "2026-08-03T16:33:36.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, do not pass untrusted input to the expand() function.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation"
},
{
"cve": "CVE-2026-69192",
"cwe": {
"id": "CWE-1389",
"name": "Incorrect Parsing of Numbers with Different Radices"
},
"discovery_date": "2026-08-03T21:02:17.374935+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510801"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `ip-address` library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass security measures like Server-Side Request Forgery (SSRF) filters and potentially gain unauthorized access to internal systems.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in the `ip-address` JavaScript library can lead to Server-Side Request Forgery (SSRF) and trust-boundary bypass. The library\u0027s inconsistent parsing of IP address octets with leading zeros, which it interprets as decimal while the network stack interprets them as octal, can cause applications to misclassify internal IP addresses as external. This discrepancy can bypass security filters designed to prevent access to internal resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69192"
},
{
"category": "external",
"summary": "RHBZ#2510801",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510801"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69192"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69192",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69192"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e",
"url": "https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1",
"url": "https://github.com/beaugunderson/ip-address/releases/tag/v10.3.1"
},
{
"category": "external",
"summary": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr",
"url": "https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr"
}
],
"release_date": "2026-08-03T19:56:13.640000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass"
},
{
"cve": "CVE-2026-73086",
"cwe": {
"id": "CWE-1241",
"name": "Use of Predictable Algorithm in Random Number Generator"
},
"discovery_date": "2026-08-11T17:11:45.607696+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2514175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the `nanoid(size)` function. This issue causes the internal random number generator to become predictable, leading to the generation of identical identifiers for session tokens, security tokens (Cross-Site Request Forgery (CSRF) tokens), and API keys. Such predictability could allow an attacker to bypass security measures that rely on unique and random identifiers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nanoid: nanoid: Predictable ID generation due to integer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the nanoid JavaScript library allows a remote attacker to cause predictable ID generation by exploiting an integer overflow in the `nanoid(size)` function. This can lead to the compromise of session tokens, CSRF tokens, and API keys, bypassing security mechanisms. The attack requires specific conditions, contributing to its Important severity rather than Critical.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73086"
},
{
"category": "external",
"summary": "RHBZ#2514175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2514175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73086",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73086"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73086"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4",
"url": "https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3",
"url": "https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac",
"url": "https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/3.3.12",
"url": "https://github.com/ai/nanoid/releases/tag/3.3.12"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/releases/tag/5.1.11",
"url": "https://github.com/ai/nanoid/releases/tag/5.1.11"
},
{
"category": "external",
"summary": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w",
"url": "https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w"
}
],
"release_date": "2026-08-11T16:46:23.024000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nanoid: nanoid: Predictable ID generation due to integer overflow"
},
{
"cve": "CVE-2026-75899",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-08-24T09:51:05.559475+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2521778"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the `fast-uri` library, used by applications for URI parsing, allows for Server-Side Request Forgery (SSRF) and host-policy bypass. By crafting a doubly percent-encoded hostname in an untrusted HTTP-family URI, an attacker could redirect internal application requests to arbitrary network destinations, potentially bypassing security controls and accessing internal services. This risk is present in Red Hat products that process untrusted URIs using affected versions of `fast-uri`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-75899"
},
{
"category": "external",
"summary": "RHBZ#2521778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521778"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-75899",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75899"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf"
}
],
"release_date": "2026-08-24T09:40:19.801000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding"
},
{
"cve": "CVE-2026-75931",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-08-24T09:51:02.191062+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2521777"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-75931"
},
{
"category": "external",
"summary": "RHBZ#2521777",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521777"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-75931",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75931"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8"
}
],
"release_date": "2026-08-24T09:30:04.212000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization"
},
{
"cve": "CVE-2026-75975",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-08-24T10:11:05.356309+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2521779"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-75975"
},
{
"category": "external",
"summary": "RHBZ#2521779",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521779"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-75975",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75975"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc"
}
],
"release_date": "2026-08-24T09:58:07.698000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization"
},
{
"cve": "CVE-2026-76172",
"cwe": {
"id": "CWE-76",
"name": "Improper Neutralization of Equivalent Special Elements"
},
"discovery_date": "2026-08-24T10:31:12.887477+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2521798"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-76172"
},
{
"category": "external",
"summary": "RHBZ#2521798",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521798"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-76172",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76172"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp"
}
],
"release_date": "2026-08-24T10:07:56.440000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects"
},
{
"cve": "CVE-2026-83605",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-09-01T14:31:57.399113+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom, a JavaScript XML DOM parser. The Element.setAttribute() function does not properly validate attribute names, allowing a remote attacker to inject specially crafted attribute names. This can lead to the injection of additional attributes, including event handlers, into browser-consumed output. Consequently, a remote attacker could achieve client-side script execution, such as Cross-Site Scripting (XSS), in the context of the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: @xmldom/xmldom: xmldom: Attribute injection allows client-side script execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in `xmldom` that allows attribute injection, potentially leading to client-side script execution. An attacker could craft malicious XML input that, when processed by an application using `xmldom` and subsequently rendered in a browser-like environment, could execute arbitrary scripts. This risk is primarily present in applications that handle untrusted XML data and display it to users.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83605"
},
{
"category": "external",
"summary": "RHBZ#2526811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83605",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83605"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83605",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83605"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/cba1321218b069182695813fa7565653708e172e",
"url": "https://github.com/xmldom/xmldom/commit/cba1321218b069182695813fa7565653708e172e"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/d8212e632507eaf1d9f609657dd4c56abeb12d44",
"url": "https://github.com/xmldom/xmldom/commit/d8212e632507eaf1d9f609657dd4c56abeb12d44"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1043",
"url": "https://github.com/xmldom/xmldom/pull/1043"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1050",
"url": "https://github.com/xmldom/xmldom/pull/1050"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.14",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.14"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.11",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.11"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-4w3w-2rp5-g8jm",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-4w3w-2rp5-g8jm"
}
],
"release_date": "2026-09-01T14:18:20.752000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: @xmldom/xmldom: xmldom: Attribute injection allows client-side script execution"
},
{
"cve": "CVE-2026-83607",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-09-01T14:41:45.856268+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526817"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. This vulnerability allows a remote attacker to inject malicious content, such as attributes or elements, into serialized XML or HTML documents. This occurs because the `Document.createElement()` function does not properly validate element names, and the `XMLSerializer.serializeToString()` function then outputs these unvalidated names directly. When these manipulated documents are processed by a web browser, it can lead to cross-site scripting (XSS), enabling attackers to execute arbitrary scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: xmldom: Cross-site scripting via unvalidated element name injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the xmldom JavaScript package. Unvalidated tag names passed to Document.createElement() are emitted verbatim during XMLSerializer.serializeToString() processing. An attacker capable of supplying controlled element names can inject arbitrary attributes, nodes, or processing instructions into serialized XML/HTML output. When rendered within a user\u0027s browser context, this input validation failure bypasses QName structural constraints and can result in Cross-Site Scripting (XSS).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83607"
},
{
"category": "external",
"summary": "RHBZ#2526817",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526817"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83607",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83607"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83607",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83607"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/cba1321218b069182695813fa7565653708e172e",
"url": "https://github.com/xmldom/xmldom/commit/cba1321218b069182695813fa7565653708e172e"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/d8212e632507eaf1d9f609657dd4c56abeb12d44",
"url": "https://github.com/xmldom/xmldom/commit/d8212e632507eaf1d9f609657dd4c56abeb12d44"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1043",
"url": "https://github.com/xmldom/xmldom/pull/1043"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1050",
"url": "https://github.com/xmldom/xmldom/pull/1050"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.14",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.14"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.11",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.11"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-w2rr-34g9-rvrj",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-w2rr-34g9-rvrj"
}
],
"release_date": "2026-09-01T14:23:58.797000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Sanitize or validate all untrusted element names before passing them to Document.createElement(), ensuring input strictly adheres to valid XML QName specifications prior to serialization.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: xmldom: Cross-site scripting via unvalidated element name injection"
},
{
"cve": "CVE-2026-83608",
"cwe": {
"id": "CWE-91",
"name": "XML Injection (aka Blind XPath Injection)"
},
"discovery_date": "2026-09-01T14:41:15.505525+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526816"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. A remote attacker can exploit this vulnerability by providing a specially crafted `DocumentType.name` containing characters like `\u003e` or whitespace. This bypasses the `requireWellFormed` validation, allowing the injection of arbitrary XML markup. Such injection can lead to unintended modifications of the XML document structure, potentially resulting in arbitrary code execution or information disclosure within applications that process the affected XML.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: @xmldom/xmldom: xmldom: XML Markup Injection via DocType Name Bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw due to XML markup injection in `xmldom` that bypasses `DOCTYPE` name validation. This vulnerability could allow an attacker to inject arbitrary XML content, potentially compromising data integrity in Red Hat products that process untrusted XML input via the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83608"
},
{
"category": "external",
"summary": "RHBZ#2526816",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526816"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83608",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83608"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83608",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83608"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/57aec90ac57b4408ae7c5d1746bf2a693b5ed90e",
"url": "https://github.com/xmldom/xmldom/commit/57aec90ac57b4408ae7c5d1746bf2a693b5ed90e"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/85f12eb4d14b44de33216cfb72b50af4d24e9fdd",
"url": "https://github.com/xmldom/xmldom/commit/85f12eb4d14b44de33216cfb72b50af4d24e9fdd"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1071",
"url": "https://github.com/xmldom/xmldom/pull/1071"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1072",
"url": "https://github.com/xmldom/xmldom/pull/1072"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.15",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.15"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.12",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.12"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-27p8-2357-5qqv"
}
],
"release_date": "2026-09-01T14:27:26.057000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.1,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: @xmldom/xmldom: xmldom: XML Markup Injection via DocType Name Bypass"
},
{
"cve": "CVE-2026-83613",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-09-01T14:52:53.778714+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom, a JavaScript module for parsing XML (Extensible Markup Language) documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing an element with numerous distinct attributes. The way xmldom processes these attributes leads to a significant performance degradation, consuming excessive computational resources. This can cause the application using xmldom to become unresponsive, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: @xmldom/xmldom: xmldom: Denial of Service due to quadratic-time attribute processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the xmldom library, affecting Red Hat products that process untrusted XML input. The quadratic complexity in attribute processing can cause a Node.js event loop to stall when handling XML documents with numerous distinct attributes, leading to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83613"
},
{
"category": "external",
"summary": "RHBZ#2526830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83613",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83613"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83613",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83613"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/2c548f200cfec991cd5846627ef8f03542309213",
"url": "https://github.com/xmldom/xmldom/commit/2c548f200cfec991cd5846627ef8f03542309213"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/cfb09b5dbeb035fdfedc9f01e2bbaf226bf47cf3",
"url": "https://github.com/xmldom/xmldom/commit/cfb09b5dbeb035fdfedc9f01e2bbaf226bf47cf3"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1071",
"url": "https://github.com/xmldom/xmldom/pull/1071"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1072",
"url": "https://github.com/xmldom/xmldom/pull/1072"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.15",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.15"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.12",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.12"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-8344-3jmq-59r6"
}
],
"release_date": "2026-09-01T14:38:49.617000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: @xmldom/xmldom: xmldom: Denial of Service due to quadratic-time attribute processing"
},
{
"cve": "CVE-2026-83614",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-09-01T14:51:05.444324+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom. Two independent quadratic paths in the XML DOM (Document Object Model) parser can lead to a denial of service (DoS). A remote attacker could exploit this by providing specially crafted XML input, causing the parser to repeatedly rescan malformed tag names or reindex and rebuild strings during normalization. This excessive processing consumes system resources, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic-time XML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A denial of service flaw exists in the xmldom library due to quadratic-time processing of malformed XML input. This vulnerability can lead to excessive resource consumption and unresponsiveness in Red Hat products that parse untrusted XML, including OpenShift Container Platform, Red Hat JBoss Fuse, Red Hat OpenShift AI, Red Hat Build of Podman Desktop, Red Hat Developer Hub, Red Hat Enterprise Linux (Grafana), and Red Hat In-Vehicle OS.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83614"
},
{
"category": "external",
"summary": "RHBZ#2526826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83614",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83614"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83614",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83614"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/0748720b620555f8c222782dcab575cf0cf403b4",
"url": "https://github.com/xmldom/xmldom/commit/0748720b620555f8c222782dcab575cf0cf403b4"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/f40ccb861eee0acbf5ee4feb9a34932e87b329c9",
"url": "https://github.com/xmldom/xmldom/commit/f40ccb861eee0acbf5ee4feb9a34932e87b329c9"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1071",
"url": "https://github.com/xmldom/xmldom/pull/1071"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1072",
"url": "https://github.com/xmldom/xmldom/pull/1072"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.15",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.15"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.12",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.12"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-93r5-fhx6-vmg9",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-93r5-fhx6-vmg9"
}
],
"release_date": "2026-09-01T14:41:42.582000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic-time XML parsing"
},
{
"cve": "CVE-2026-83615",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-01T15:01:21.719285+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526843"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom, a JavaScript library for parsing XML documents. A remote attacker could exploit this vulnerability by providing a specially crafted XML document. When processed, this document would cause the library to consume an excessive amount of memory, leading to the application running out of resources and becoming unavailable, a condition known as Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic memory consumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `xmldom` library, affecting Red Hat products that process untrusted XML input. Exploitation involves providing a crafted XML document with deeply nested elements and new namespace prefixes, which can lead to quadratic memory consumption and exhaust the process heap, causing service disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83615"
},
{
"category": "external",
"summary": "RHBZ#2526843",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526843"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83615"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83615",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83615"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/954370f58c046223faf95ba77efcbc8ce014409d",
"url": "https://github.com/xmldom/xmldom/commit/954370f58c046223faf95ba77efcbc8ce014409d"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/dabffe884e864eeecb1f515c716f875e1bc47ec1",
"url": "https://github.com/xmldom/xmldom/commit/dabffe884e864eeecb1f515c716f875e1bc47ec1"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1071",
"url": "https://github.com/xmldom/xmldom/pull/1071"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1072",
"url": "https://github.com/xmldom/xmldom/pull/1072"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.15",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.15"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.12",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.12"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-965w-775f-mr7g"
}
],
"release_date": "2026-09-01T14:44:05.884000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: @xmldom/xmldom: xmldom: Denial of Service via quadratic memory consumption"
},
{
"cve": "CVE-2026-83616",
"cwe": {
"id": "CWE-91",
"name": "XML Injection (aka Blind XPath Injection)"
},
"discovery_date": "2026-09-01T15:06:02.142120+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526858"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. An attacker can exploit a vulnerability in how processing instructions are handled to inject arbitrary XML structures. This occurs because the software fails to properly validate input, allowing special characters to bypass security checks. Successful exploitation could lead to data manipulation or other integrity impacts within applications processing the affected XML.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "xmldom: xmldom: XML Structure Injection via Unvalidated Processing Instruction Targets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the xmldom JavaScript package. The Document.createProcessingInstruction() function in lib/dom.js fails to validate target strings, and XMLSerializer.serializeToString() with requireWellFormed: true performs insufficient target validation. An attacker supplying crafted processing instruction targets containing special characters (such as \u003e, ?, or whitespace) can break processing instruction boundaries (\u003c?target data?\u003e) during serialization. This enables arbitrary XML markup injection, compromising document integrity in applications processing serialized XML output.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83616"
},
{
"category": "external",
"summary": "RHBZ#2526858",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526858"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83616",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83616"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83616",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83616"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/1cde3e31a07c41c87cfd368d6946aa477f16b4f9",
"url": "https://github.com/xmldom/xmldom/commit/1cde3e31a07c41c87cfd368d6946aa477f16b4f9"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/3b694872bcb5c7e3cbadba961a4be2488750ce5b",
"url": "https://github.com/xmldom/xmldom/commit/3b694872bcb5c7e3cbadba961a4be2488750ce5b"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1071",
"url": "https://github.com/xmldom/xmldom/pull/1071"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1072",
"url": "https://github.com/xmldom/xmldom/pull/1072"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.15",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.15"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.9.12",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.9.12"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-c7q8-3ch8-vqpv",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-c7q8-3ch8-vqpv"
}
],
"release_date": "2026-09-01T14:45:44.504000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Sanitize or validate all target strings passed to Document.createProcessingInstruction() to ensure compliance with XML Name production rules prior to serialization.",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "xmldom: xmldom: XML Structure Injection via Unvalidated Processing Instruction Targets"
},
{
"cve": "CVE-2026-83619",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-09-01T15:04:45.659387+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526854"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in xmldom, a JavaScript module used for processing XML documents. A remote attacker could exploit a vulnerability in the XML parser by submitting a specially crafted XML input. This could lead to a Denial of Service (DoS), causing the affected system to become unresponsive by stalling the Node.js event loop. The vulnerability stems from a regular expression that processes end-tags inefficiently, consuming excessive resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "@xmldom/xmldom: xmldom: Denial of Service via crafted XML input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-83619"
},
{
"category": "external",
"summary": "RHBZ#2526854",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526854"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-83619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-83619"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-83619",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-83619"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/commit/3abb0934f5a8a84d83a1f9cde0f2bd04c08b2a09",
"url": "https://github.com/xmldom/xmldom/commit/3abb0934f5a8a84d83a1f9cde0f2bd04c08b2a09"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/pull/1072",
"url": "https://github.com/xmldom/xmldom/pull/1072"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/releases/tag/0.8.15",
"url": "https://github.com/xmldom/xmldom/releases/tag/0.8.15"
},
{
"category": "external",
"summary": "https://github.com/xmldom/xmldom/security/advisories/GHSA-x4fp-j954-r2f4",
"url": "https://github.com/xmldom/xmldom/security/advisories/GHSA-x4fp-j954-r2f4"
}
],
"release_date": "2026-09-01T14:51:28.121000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "@xmldom/xmldom: xmldom: Denial of Service via crafted XML input"
},
{
"cve": "CVE-2026-84292",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-09-02T20:21:15.599288+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527747"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker\u0027s host as legitimate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84292"
},
{
"category": "external",
"summary": "RHBZ#2527747",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527747"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3"
}
],
"release_date": "2026-09-02T20:09:51.415000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization"
},
{
"cve": "CVE-2026-84394",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-09-02T20:31:21.036047+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated Moderate because successful exploitation requires a specific configuration where fast-uri handles security checks but a different client resolves the URL, enabling security policy bypasses without direct code execution. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3 (fixed in 2.4.6, 3.1.7, and 4.1.4).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84394"
},
{
"category": "external",
"summary": "RHBZ#2527756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84394",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84394"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g"
}
],
"release_date": "2026-09-02T20:25:35.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies"
},
{
"cve": "CVE-2026-84961",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-04T16:52:40.440125+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528735"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici\u0027s BalancedPool component. This vulnerability allows a remote attacker to bypass Transport Layer Security (TLS) certificate validation. The BalancedPool constructor incorrectly processes its options, silently discarding custom certificate validation functions. Consequently, a peer with an otherwise untrusted certificate may be accepted, potentially compromising the integrity of secure communication.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw only affects applications that construct an undici BalancedPool with a function-valued connect or tls option \u2014 for example, a custom checkServerIdentity callback or connector used for certificate pinning across multiple upstreams. Client, Pool, Agent, and RoundRobinPool destructure these options before the internal JSON-based clone and are not affected. An attacker able to present, on the network path, a TLS endpoint whose certificate the application\u0027s custom validator was written to reject \u2014 but which still satisfies Node.js\u0027s default hostname and chain checks \u2014 can have that certificate silently accepted when the connection goes through BalancedPool, enabling a man-in-the-middle attack against affected connections.\nThis affects undici versions from 7.24.1 up to 7.29.1 and from 8.0.0 up to 8.10.2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"known_not_affected": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84961"
},
{
"category": "external",
"summary": "RHBZ#2528735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84961"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84961",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84961"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-w293-vg96-wgc3"
}
],
"release_date": "2026-09-04T16:47:55.724000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T07:52:01+00:00",
"details": "For more about Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69248"
},
{
"category": "workaround",
"details": "Applications that do not use BalancedPool, or that use it without a custom function-valued connect/tls option, are not affected and require no action. As a workaround until packages are updated, avoid using BalancedPool for any connection that relies on custom TLS certificate validation (e.g. certificate pinning); use Client, Pool, or Agent instead, which are unaffected. The permanent fix is upgrading undici to 7.29.1 or later (7.x line) or 8.10.2 or later (8.x line).",
"product_ids": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:ea53db6012b6fe1c80760624caddb0d3b674614b62cb3c359ed3fde270314eb2_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:1b8153a28b5a3797104fd32a54e3ac38b3b573ff2d65d99bd257d650eddea1fc_amd64",
"Red Hat Developer Hub 1.9:registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:036c292951ddf755006c6fefc9e1b8faf9a784757b91785e990bbfb856baa3ff_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…