Skip to content
OpenAdvisories
Medium RHSA-2026:33521 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Aug 18, 2026 · Updated Oct 17, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 python3.14 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-debug 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-devel 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-debug 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-devel 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-idle 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-libs 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-test 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-freethreading-tkinter 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-idle 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-libs 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-test 0:3.14.6-1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 python3.14-tkinter 0:3.14.6-1.1.hum1

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-8723

    qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly

    ### Summary `qs.stringify` throws `TypeError` when called with `arrayFormat: 'comma'` and `encodeValuesOnly: true` on an array containing `null` or `undefined`. The throw is synchronous and not handled by any of qs's null-related options (`skipNulls`, `strict…

    ljharb qs langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Azure Linux Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-8723
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33521.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2478227
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-8723
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-8723
  • article
    https://github.com/ljharb/qs/commit/21f80b33e5c8b3f7eba1034fff0da4a4a37a1d41
  • article
    https://github.com/ljharb/qs/security/advisories/GHSA-q8mj-m7cp-5q26