Skip to content
OpenAdvisories
Medium RHSA-2026:93600 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 nodejs24 1:24.22.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs24-bin 1:24.22.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs24-devel 1:24.22.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs24-docs 1:24.22.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs24-full-i18n 1:24.22.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs24-libs 1:24.22.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs24-npm 2:11.19.1-1.24.22.2.0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs24-npm-bin 2:24.22.2-0.2.hum1
Red Hat · Hardened Images 1 hummingbird:1 v8-13.6-devel 3:13.6.233.17-1.24.22.2.0.2.hum1

Vulnerabilities 1

  • Medium 6.9
    CVE-2026-118764 Public exploit

    minimatch: potential denial of service via globparts amplification

    minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.0 and prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so that, at optimizationLevel 2 or higher, it repeatedly expands atta…

    isaacs minimatch langfuse-3-worker renovate Debian Ubuntu Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-118764
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93600.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2563607
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-118764
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-118764
  • article
    https://github.com/isaacs/minimatch/commit/77a0f5c4b80bdc641c3c930a1d9edf5ad2db57f8
  • article
    https://github.com/isaacs/minimatch/releases/tag/v11.0.1
  • article
    https://github.com/isaacs/minimatch/security/advisories/GHSA-g3hv-75wg-m249