Skip to content
OpenAdvisories
High RHSA-2026:48241 5 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Aug 5, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 grafana13.1 0:13.1.1-0.3.hum1

Vulnerabilities 5

  • High 8.3
    CVE-2026-67320

    axios before 0.33.0 Prototype Pollution via Node HTTP adapter

    axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a common immutable inte…

    axios axios langfuse-3-worker prism Debian Ubuntu Wolfi npm
  • Medium 6.9
    CVE-2026-67321

    axios 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 Denial of Service via maxDepth bypass

    axios versions 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 contain an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level keys ending in '{}'. Attackers who control object keys and nested values passed to axios form or par…

    axios axios langfuse-3-worker prism Debian Ubuntu Wolfi npm
  • Medium 6.3
    CVE-2026-67312

    axios 0.28.0 before 0.33.0 and 1.0.0 before 1.18.0 Denial of Service via formToJSON

    axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (exposed as axios.formToJSON() and used internally when serializing FormData with Content-Type: application/json). When an application passe…

    axios axios langfuse-3-worker prism Debian Ubuntu Wolfi npm
  • Medium 5.9
    CVE-2026-67213

    nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom

    nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the…

    nanoid_project nanoid langfuse-3-worker renovate Debian Ubuntu Wolfi npm
  • Medium 5.9
    CVE-2026-67214

    nanoid Infinite Loop via Negative Size in non-secure module

    nanoid (Nano ID) before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module (nanoid/non-secure). When these functions are given a negative size, the loop counter is decremented from a negative value …

    nanoid_project nanoid langfuse-3-worker langfuse-3 Debian Ubuntu Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-67213
  • report
    https://access.redhat.com/security/cve/CVE-2026-67214
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-67321
  • report
    https://access.redhat.com/security/cve/CVE-2026-67312
  • report
    https://access.redhat.com/security/cve/CVE-2026-67320
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48241.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2508406
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67213
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67213
  • article
    https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7
  • article
    https://github.com/ai/nanoid/releases/tag/5.1.6
  • article
    https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2508411
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67214
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67214
  • article
    https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49
  • article
    https://github.com/ai/nanoid/releases/tag/5.1.16
  • article
    https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510007
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67312
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67312
  • article
    https://github.com/axios/axios/security/advisories/GHSA-pmv8-rq9r-6j72
  • article
    https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-formtojson
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2509993
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67320
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67320
  • article
    https://github.com/axios/axios/commit/df53d7dd99b202fb194217abd127ae6a630e70dc
  • article
    https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9
  • article
    https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-node-http-adapter
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510011
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67321
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67321
  • article
    https://github.com/axios/axios/security/advisories/GHSA-hcpx-6fm6-wx23
  • article
    https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-maxdepth-bypass