Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fixed packages 1

Vulnerabilities 7

• High 7.5
  CVE-2026-111181

  body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

  body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using body-parser with default options. When a request carries a Content-Encoding suc…

  body-parser body-parser langfuse-3-worker kubeflow-centraldashboard Debian Ubuntu Azure Linux Wolfi npm
  Oct 22, 2026
• Medium 6.5
  CVE-2026-16491

  CVE-2026-16491 CVE Record

  Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted dashboard listings. A user with dashboard permission-management rights on any folder could therefore be treated as an administrator of ever…

  Grafana Grafana OSS Grafana Enterprise grafana-13.0 Web / CMS Wolfi
  Oct 27, 2026
• Medium 6.1
  CVE-2026-110306

  fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding

  fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape() function before val…

  fast-uri fast-uri renovate prism Debian Ubuntu Wolfi npm
  Oct 20, 2026
• Medium 6.0
  CVE-2026-79656

  OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectors

  A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC access, refresh and ID tokens of users who sign in through the Generic OAuth, Google or GitLab providers. Grafana writes these tokens to it…

  Grafana Grafana OSS Grafana Enterprise grafana-12.3 Web / CMS Alpine Wolfi
  Oct 28, 2026
• Medium 4.8
  CVE-2026-110180

  fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization

  fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP-family schemes the canonicalizeHost() function passes the parsed host to the W…

  fast-uri fast-uri renovate prism Debian Ubuntu Wolfi npm
  Oct 20, 2026
• Low 3.7
  CVE-2026-110095

  fast-uri vulnerable to improper path equivalence in relative reference normalization

  fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normalize() and serialize() functions apply RFC 3986 dot-segment removal to the path of a relat…

  fast-uri fast-uri renovate prism Debian Ubuntu Wolfi npm
  Oct 20, 2026
• Low 3.7
  CVE-2026-110725

  fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references

  fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, when serialize(), normalize(), or resolve() are called with the non-default option reference set to…

  fast-uri fast-uri renovate prism Debian Ubuntu Wolfi npm
  Oct 20, 2026

References

• report
  https://access.redhat.com/security/cve/CVE-2026-110095
• report
  https://access.redhat.com/security/cve/CVE-2026-110180
• report
  https://access.redhat.com/security/cve/CVE-2026-110306
• report
  https://access.redhat.com/security/cve/CVE-2026-110725
• report
  https://access.redhat.com/security/cve/CVE-2026-111181
• article
  https://access.redhat.com/security/updates/classification/
• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2026-16491
• report
  https://access.redhat.com/security/cve/CVE-2026-79656
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_90990.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2562266
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-16491
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-16491
• article
  https://grafana.com/security/security-advisories/cve-2026-16491
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2528700
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-79656
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-79656
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556002
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-110095
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-110095
• article
  https://cna.openjsf.org/security-advisories.html
• article
  https://github.com/fastify/fast-uri/security/advisories/GHSA-xhq7-xmqj-769h
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556008
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-110180
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-110180
• article
  https://github.com/fastify/fast-uri/security/advisories/GHSA-wjr9-j795-jxcr
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556005
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-110306
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-110306
• article
  https://github.com/fastify/fast-uri/security/advisories/GHSA-w74x-v6f9-j3xg
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2556007
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-110725
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-110725
• article
  https://github.com/fastify/fast-uri/security/advisories/GHSA-333x-w4r6-6crp
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2559049
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-111181
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-111181
• article
  https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828