Skip to content
OpenAdvisories
High RHSA-2026:54412 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Aug 13, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 grafana13.1 0:13.1.3-0.1.hum1

Vulnerabilities 1

  • High 7.4
    CVE-2026-73086

    nanoid: Integer Overflow or Wraparound

    nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 21…

    ai nanoid jupyter-base-notebook node-postcss Debian Ubuntu Wolfi npm

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-73086
  • article
    https://access.redhat.com/security/updates/classification/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54412.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2514175
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-73086
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-73086
  • article
    https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4
  • article
    https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3
  • article
    https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac
  • article
    https://github.com/ai/nanoid/releases/tag/3.3.12
  • article
    https://github.com/ai/nanoid/releases/tag/5.1.11
  • article
    https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w