Skip to content
OpenAdvisories
High RHSA-2026:54518 5 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Aug 14, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 grafana12.4 0:12.4.8-0.1.1.hum1

Vulnerabilities 5

  • High 7.5
    CVE-2026-16221

    fast-uri vulnerable to host confusion via literal backslash authority delimiter

    Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter. Node's native WHATWG URL parser, used by fetch, undici, and Nod…

    fast-uri fast-uri langfuse-3-worker renovate Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-73088

    Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)

    Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, normalizeStats() in node.js, reached unconditionally through getStat() and loadStat() on every browserslist() call, processes untru…

    browserslist browserslist langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-73089

    Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM

    Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct `(queries, context)` result in cache and every parseQueries() AST in parseCache without a size cap,…

    browserslist browserslist langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm
  • High 7.4
    CVE-2026-73086

    nanoid: Integer Overflow or Wraparound

    nanoid is a secure, URL-friendly, unique string ID generator for JavaScript. Prior to versions 3.3.12 and 5.1.11, the nanoid(size) function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer, allowing a value of 21…

    ai nanoid jupyter-base-notebook node-postcss Debian Ubuntu Wolfi npm
  • Medium 6.6
    CVE-2026-45819

    baseline-browser-mapping process termination on invalid input causes denial of service

    baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

    web-platform-dx baseline-browser-mapping langfuse-3-worker jupyter-base-notebook Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-73086
  • report
    https://access.redhat.com/security/cve/CVE-2026-73088
  • report
    https://access.redhat.com/security/cve/CVE-2026-73089
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-45819
  • report
    https://access.redhat.com/security/cve/CVE-2026-16221
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54518.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2502307
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-16221
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-16221
  • article
    https://cna.openjsf.org/security-advisories.html
  • article
    https://github.com/fastify/fast-uri/security/advisories/GHSA-v2hh-gcrm-f6hx
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2515240
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-45819
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-45819
  • article
    https://github.com/web-platform-dx/baseline-browser-mapping/blob/b7881aa61c8a057e24468ab5ee18c5ecedbbf691/src/index.ts#L142
  • article
    https://github.com/web-platform-dx/baseline-browser-mapping/pull/137/changes#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519
  • article
    https://www.npmjs.com/package/baseline-browser-mapping
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2514175
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-73086
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-73086
  • article
    https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4
  • article
    https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3
  • article
    https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac
  • article
    https://github.com/ai/nanoid/releases/tag/3.3.12
  • article
    https://github.com/ai/nanoid/releases/tag/5.1.11
  • article
    https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2514177
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-73088
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-73088
  • article
    https://github.com/browserslist/browserslist/commit/f9914ad9effc865ccc27d816255625890b31ca51
  • article
    https://github.com/browserslist/browserslist/releases/tag/4.28.7
  • article
    https://github.com/browserslist/browserslist/security/advisories/GHSA-73wf-gq98-2v4g
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2514195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-73089
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-73089
  • article
    https://github.com/browserslist/browserslist/commit/f2931a3ff2a3a31abf84ef01a7400b270aad6405
  • article
    https://github.com/browserslist/browserslist/security/advisories/GHSA-c83g-rgw3-j3cx