Skip to content
OpenAdvisories
Medium RHSA-2026:93605 1 CVE

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 prometheus3.13 0:3.13.5-0.3.hum1

Vulnerabilities 1

  • Medium 5.9
    CVE-2026-116689

    follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects

    follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.2, the documented sensitiveHeaders option is checked with value instanceof Array, so an array created in another JavaScript realm is repla…

    follow-redirects follow-redirects prism opensearch-dashboards-3 Debian Ubuntu Wolfi npm

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-116689
  • article
    https://access.redhat.com/security/updates/classification/
  • article
    https://images.redhat.com/
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_93605.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2562364
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-116689
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-116689
  • article
    https://github.com/follow-redirects/follow-redirects/commit/b0a7751e9cd64cd8eeb6ec67d2f206a9cc88d3f8
  • article
    https://github.com/follow-redirects/follow-redirects/releases/tag/v1.16.2
  • article
    https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-mrwp-f3q8-3g9p