Skip to content
OpenAdvisories
High RHSA-2026:72116 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Sep 26, 2026 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 grafana12.4 0:12.4.10-0.8.hum1

Vulnerabilities 1

  • High 7.5
    CVE-2026-9496

    pacote is vulnerable to Denial of Service (DoS) via the addGitSha function

    Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s rege…

    prism lerna npm npm Debian Ubuntu Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-9496
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72116.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2481394
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-9496
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-9496
  • article
    https://github.com/npm/pacote/blob/9d7459440826ab4cf962ef98d8f3fd0c4d464b5c/lib/util/add-git-sha.js%23L2C1-L13C2
  • article
    https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-16874025
  • article
    https://security.snyk.io/vuln/SNYK-JS-PACOTE-8225084