Skip to content
OpenAdvisories
Medium RHSA-2026:93602 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 nodejs26 1:26.13.0-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs26-bin 1:26.13.0-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs26-devel 1:26.13.0-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs26-docs 1:26.13.0-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs26-full-i18n 1:26.13.0-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs26-libs 1:26.13.0-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs26-npm 1:11.20.0-1.26.13.0.0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 nodejs26-npm-bin 1:26.13.0-0.1.1.hum1
Red Hat · Hardened Images 1 hummingbird:1 v8-14.6-devel 3:14.6.202.34-1.26.13.0.0.1.1.hum1

Vulnerabilities 1

  • Medium 6.9
    CVE-2026-118764 Public exploit

    minimatch: potential denial of service via globparts amplification

    minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Starting in 7.0.0 and prior to 11.0.1, src/index.ts implements firstPhasePreProcess() so that, at optimizationLevel 2 or higher, it repeatedly expands atta…

    isaacs minimatch langfuse-3-worker renovate Debian Ubuntu Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-118764
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93602.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2563607
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-118764
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-118764
  • article
    https://github.com/isaacs/minimatch/commit/77a0f5c4b80bdc641c3c930a1d9edf5ad2db57f8
  • article
    https://github.com/isaacs/minimatch/releases/tag/v11.0.1
  • article
    https://github.com/isaacs/minimatch/security/advisories/GHSA-g3hv-75wg-m249