Skip to content
OpenAdvisories
High RHSA-2026:48758 8 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Jul 31, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 jaeger 0:2.20.0-0.8.hum1

Vulnerabilities 8

  • High 8.3
    CVE-2026-67320

    axios before 0.33.0 Prototype Pollution via Node HTTP adapter

    axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a common immutable inte…

    axios axios langfuse-3-worker prism Debian Ubuntu Wolfi npm
  • High 7.4
    CVE-2026-73086

    nanoid: Integer Overflow or Wraparound

    nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 21…

    ai nanoid jupyter-base-notebook node-postcss Debian Ubuntu Wolfi npm
  • High 7.2
    CVE-2026-27459

    pyOpenSSL DTLS cookie callback buffer overflow

    pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL…

    pyca pyopenssl airflow-3 py3-cassandra-medusa Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • Medium 6.9
    CVE-2026-67321

    axios 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 Denial of Service via maxDepth bypass

    axios versions 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 contain an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level keys ending in '{}'. Attackers who control object keys and nested values passed to axios form or par…

    axios axios langfuse-3-worker prism Debian Ubuntu Wolfi npm
  • Medium 6.3
    CVE-2026-67312

    axios 0.28.0 before 0.33.0 and 1.0.0 before 1.18.0 Denial of Service via formToJSON

    axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON (exposed as axios.formToJSON() and used internally when serializing FormData with Content-Type: application/json). When an application passe…

    axios axios langfuse-3-worker prism Debian Ubuntu Wolfi npm
  • Medium 6.3
    CVE-2026-67313

    axios 0.28.0 before 1.18.0 Denial of Service via formDataToJSON

    axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket segments. Attackers can supply FormData with field names containing thousands of nested brackets to exhaust the Ja…

    axios axios langfuse-3-worker prism Debian Ubuntu Wolfi npm
  • Medium 6.3
    CVE-2026-67314

    axios before 1.18.0 Prototype Pollution via auth subfields

    axios versions >=1.15.2 and <1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling (lib/adapters/http.js and lib/helpers/resolveConfig.js). When an application is already affected by a separate prototype-pollution primitive and …

    axios axios langfuse-3-worker prism Debian Ubuntu Wolfi npm
  • Low 2.3
    CVE-2026-62995

    joserfc accepts JWT with padding, leading to JWT malleability

    joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding (==) which are not conforming to the JOSE specifications. This …

    authlib joserfc joserfc joserfc Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-62995
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-67314
  • report
    https://access.redhat.com/security/cve/CVE-2026-67313
  • report
    https://access.redhat.com/security/cve/CVE-2026-67321
  • report
    https://access.redhat.com/security/cve/CVE-2026-67312
  • report
    https://access.redhat.com/security/cve/CVE-2026-67320
  • report
    https://access.redhat.com/security/cve/CVE-2026-73086
  • report
    https://access.redhat.com/security/cve/CVE-2026-27459
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48758.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2448503
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-27459
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-27459
  • article
    https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst
  • article
    https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408
  • article
    https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2508524
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-62995
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-62995
  • article
    https://github.com/authlib/joserfc/security/advisories/GHSA-5jhw-7jv7-qcqq
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510007
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67312
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67312
  • article
    https://github.com/axios/axios/security/advisories/GHSA-pmv8-rq9r-6j72
  • article
    https://www.vulncheck.com/advisories/axios-before-denial-of-service-via-formtojson
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67313
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510030
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67314
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67314
  • article
    https://github.com/axios/axios/security/advisories/GHSA-xj6q-8x83-jv6g
  • article
    https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-auth-subfields
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2509993
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-67320
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-67320
  • article
    https://github.com/axios/axios/commit/df53d7dd99b202fb194217abd127ae6a630e70dc
  • article
    https://github.com/axios/axios/security/advisories/GHSA-gcfj-64vw-6mp9
  • article
    https://www.vulncheck.com/advisories/axios-before-prototype-pollution-via-node-http-adapter
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2510011