Red Hat Enterprise Linux (Apicurio Registry): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• High 8.5
  CVE-2026-12975

  Apicurio/apicurio-registry: apicurio-registry: unhardened saxparser in content-type detection leads to blind xxe / ssrf / billion-laughs dos

  A flaw was found in Apicurio Registry. The ContentTypeUtil.isParsableXml() method creates a SAXParserFactory without enabling secure processing features or disabling external entity resolution. An attacker with artifact-write permission (or unauthenticated wh…

  Red Hat Red Hat build of Apicurio Registry 3.3.1 io.apicurio:apicurio-registry-schema-util-common Maven
  Jun 25, 2026
• High 7.5
  CVE-2026-44496

  Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

  Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF cookie name without escaping regex metacharacters. In standard…

  axios axios katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Wolfi npm
  Jun 11, 2026
• High 7.4
  CVE-2026-12992

  Apicurio/apicurio-registry: apicurio-registry: ssrf via wsdl4j import dereference in wsdl full validation

  A flaw was found in Apicurio Registry. The WSDLReaderAccessor creates a wsdl4j WSDLReader without disabling the javax.wsdl.importDocuments feature. When the VALIDITY rule is set to FULL, an attacker with Developer-role access can upload a WSDL document contai…

  Red Hat Red Hat build of Apicurio Registry 3.3.1 io.apicurio:apicurio-registry-schema-util-wsdl Maven
  Jun 25, 2026
• Medium 6.5
  CVE-2026-12993

  Apicurio/apicurio-registry: apicurio-registry: xml entity-expansion denial of service via internal dtd subset

  A flaw was found in Apicurio Registry. The DocumentBuilderAccessor correctly blocks external DTD and schema access but does not disable DOCTYPE declarations or enable FEATURE_SECURE_PROCESSING. An attacker with artifact-write permission can upload XML documen…

  Red Hat Red Hat build of Apicurio Registry 3.3.1 io.apicurio:apicurio-registry-schema-util-xml Maven
  Jun 25, 2026
• Medium 6.3
  CVE-2026-49978

  DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content

  DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element inside <template>.content, allowing attacker-controlled markup such as event ha…

  cure53 DOMPurify langfuse-3-worker nextcloud-server-33 Debian Ubuntu Wolfi npm
  Jul 14, 2026
• Medium 6.0
  CVE-2026-41240

  DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)

  DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions prior to 3.4.0 have an inconsistency between FORBID_TAGS and FORBID_ATTR handling when function-based ADD_TAGS is used. Commit c361baa added an early exit for FORBID_AT…

  cure53 DOMPurify opensearch-dashboards-3 nextcloud-server-33 Debian Ubuntu Wolfi npm
  Apr 23, 2026

Revision history

1. 2026-10-01 #7

   Neue Updates von Red Hat aufgenommen

2. 2026-09-22 #6

   Neue Updates von Red Hat aufgenommen

3. 2026-09-16 #5

   Neue Updates von Red Hat aufgenommen

4. 2026-09-10 #4

   Neue Updates von Red Hat und IBM aufgenommen

5. 2026-09-03 #3

   Neue Updates von Red Hat aufgenommen

6. 2026-09-01 #2

   Neue Updates von Red Hat aufgenommen

7. 2026-08-24 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:59360 vom 2026-08-24
  https://access.redhat.com/errata/RHSA-2026:59360
• Red Hat Security Advisory RHSA-2026:62260 vom 2026-09-02
  https://access.redhat.com/errata/RHSA-2026:62260
• Red Hat Security Advisory RHSA-2026:59833 vom 2026-09-03
  https://access.redhat.com/errata/RHSA-2026:59833
• Red Hat Security Advisory RHSA-2026:66545 vom 2026-09-11
  https://access.redhat.com/errata/RHSA-2026:66545
• Red Hat Security Advisory RHSA-2026:66488 vom 2026-09-10
  https://access.redhat.com/errata/RHSA-2026:66488
• IBM Security Bulletin 7286986 vom 2026-09-10
  https://www.ibm.com/support/pages/node/7286986
• Red Hat Security Advisory RHSA-2026:68333 vom 2026-09-16
  https://access.redhat.com/errata/RHSA-2026:68333
• Red Hat Security Advisory RHSA-2026:70267 vom 2026-09-22
  https://access.redhat.com/errata/RHSA-2026:70267
• Red Hat Security Advisory RHSA-2026:74511 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74511