GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

RHSA-2026:22934

Vulnerability from csaf_redhat - Published: 2026-06-03 16:10 - Updated: 2026-09-09 22:30
Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs: rust: * cargo-1.96.0-1.hum1 (aarch64, x86_64) * clippy-1.96.0-1.hum1 (aarch64, x86_64) * rust-1.96.0-1.hum1 (aarch64, x86_64) * rust-analyzer-1.96.0-1.hum1 (aarch64, x86_64) * rust-debugger-common-1.96.0-1.hum1 (noarch) * rust-doc-1.96.0-1.hum1 (aarch64, x86_64) * rust-gdb-1.96.0-1.hum1 (noarch) * rust-lldb-1.96.0-1.hum1 (noarch) * rust-src-1.96.0-1.hum1 (noarch) * rust-std-static-1.96.0-1.hum1 (aarch64, x86_64) * rust-std-static-aarch64-unknown-none-softfloat-1.96.0-1.hum1 (aarch64) * rust-std-static-aarch64-unknown-uefi-1.96.0-1.hum1 (aarch64) * rust-std-static-i686-pc-windows-gnu-1.96.0-1.hum1 (noarch) * rust-std-static-wasm32-unknown-unknown-1.96.0-1.hum1 (noarch) * rust-std-static-wasm32-wasip1-1.96.0-1.hum1 (noarch) * rust-std-static-x86_64-pc-windows-gnu-1.96.0-1.hum1 (noarch) * rust-std-static-x86_64-unknown-none-1.96.0-1.hum1 (x86_64) * rust-std-static-x86_64-unknown-uefi-1.96.0-1.hum1 (x86_64) * rustfmt-1.96.0-1.hum1 (aarch64, x86_64) * rust-1.96.0-1.hum1.src (src)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-6734

A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.

7.5 (High)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-940 - Improper Verification of Source of a Communication Channel
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:rust-main@aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:rust-main@noarch —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:rust-main@src —
Vendor Fix fix
Workaround
Unresolved product id: Red Hat Hardened Images:rust-main@x86_64 —
Vendor Fix fix
Workaround
Threats
Impact Important
CVE-2026-9358

A flaw was found in postcss. A remote attacker could exploit a vulnerability in the `toString` function of the AST Serialization component by executing a manipulation, leading to uncontrolled recursion. This uncontrolled recursion can result in a Denial of Service (DoS) condition, making the affected system unavailable.

4.3 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-674 - Uncontrolled Recursion
Affected products
Fixed 4 products, the same list as for CVE-2026-6734
Threats
Impact Moderate
CVE-2026-9675

A flaw was found in undici. A malicious WebSocket server could exploit this vulnerability by sending fragmented messages that individually meet size limits but collectively exceed them. This can lead to unbounded memory growth in the client process, resulting in memory exhaustion and a denial of service (DoS).

5.9 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 - Uncontrolled Resource Consumption
Affected products
Fixed 4 products, the same list as for CVE-2026-6734
Threats
Impact Moderate
CVE-2026-9697

A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.

7.4 (High)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-295 - Improper Certificate Validation
Affected products
Fixed 4 products, the same list as for CVE-2026-6734
Threats
Impact Important
CVE-2026-44432

A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-409 - Improper Handling of Highly Compressed Data (Data Amplification)
Affected products
Fixed 4 products, the same list as for CVE-2026-6734
Threats
Impact Important
CVE-2026-45149

A flaw was found in the brace-expansion library. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a large numeric range for expansion. The library allocates excessive memory to generate all intermediate elements before applying the maximum limit, leading to high memory consumption and potential application crashes. This can impact the availability of systems using the library.

6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Fixed 4 products, the same list as for CVE-2026-6734
Threats
Impact Moderate
References
URL Category
https://access.redhat.com/errata/RHSA-2026:22934 self
https://images.redhat.com/ external
https://access.redhat.com/security/cve/CVE-2026-45149 external
https://access.redhat.com/security/updates/classi… external
https://access.redhat.com/security/cve/CVE-2026-9358 external
https://access.redhat.com/security/cve/CVE-2026-9697 external
https://access.redhat.com/security/cve/CVE-2026-6734 external
https://access.redhat.com/security/cve/CVE-2026-9675 external
https://access.redhat.com/security/cve/CVE-2026-44432 external
https://access.redhat.com/security/cve/CVE-2026-51221 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-6734 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490024 external
https://www.cve.org/CVERecord?id=CVE-2026-6734 external
https://nvd.nist.gov/vuln/detail/CVE-2026-6734 external
https://cna.openjsf.org/security-advisories.html external
https://github.com/nodejs/undici/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-9358 self
https://bugzilla.redhat.com/show_bug.cgi?id=2481006 external
https://www.cve.org/CVERecord?id=CVE-2026-9358 external
https://nvd.nist.gov/vuln/detail/CVE-2026-9358 external
https://gist.github.com/bx33661/581e3a38134601c04… external
https://vuldb.com/submit/813080 external
https://vuldb.com/vuln/365321 external
https://vuldb.com/vuln/365321/cti external
https://access.redhat.com/security/cve/CVE-2026-9675 self
https://bugzilla.redhat.com/show_bug.cgi?id=2489979 external
https://www.cve.org/CVERecord?id=CVE-2026-9675 external
https://nvd.nist.gov/vuln/detail/CVE-2026-9675 external
https://github.com/nodejs/undici/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-9697 self
https://bugzilla.redhat.com/show_bug.cgi?id=2490018 external
https://www.cve.org/CVERecord?id=CVE-2026-9697 external
https://nvd.nist.gov/vuln/detail/CVE-2026-9697 external
https://github.com/nodejs/undici/security/advisor… external
https://access.redhat.com/security/cve/CVE-2026-44432 self
https://bugzilla.redhat.com/show_bug.cgi?id=2477154 external
https://www.cve.org/CVERecord?id=CVE-2026-44432 external
https://nvd.nist.gov/vuln/detail/CVE-2026-44432 external
https://github.com/urllib3/urllib3/security/advis… external
https://access.redhat.com/security/cve/CVE-2026-45149 self
https://bugzilla.redhat.com/show_bug.cgi?id=2483481 external
https://www.cve.org/CVERecord?id=CVE-2026-45149 external
https://nvd.nist.gov/vuln/detail/CVE-2026-45149 external
https://github.com/juliangruber/brace-expansion/s… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nrust:\n  * cargo-1.96.0-1.hum1 (aarch64, x86_64)\n  * clippy-1.96.0-1.hum1 (aarch64, x86_64)\n  * rust-1.96.0-1.hum1 (aarch64, x86_64)\n  * rust-analyzer-1.96.0-1.hum1 (aarch64, x86_64)\n  * rust-debugger-common-1.96.0-1.hum1 (noarch)\n  * rust-doc-1.96.0-1.hum1 (aarch64, x86_64)\n  * rust-gdb-1.96.0-1.hum1 (noarch)\n  * rust-lldb-1.96.0-1.hum1 (noarch)\n  * rust-src-1.96.0-1.hum1 (noarch)\n  * rust-std-static-1.96.0-1.hum1 (aarch64, x86_64)\n  * rust-std-static-aarch64-unknown-none-softfloat-1.96.0-1.hum1 (aarch64)\n  * rust-std-static-aarch64-unknown-uefi-1.96.0-1.hum1 (aarch64)\n  * rust-std-static-i686-pc-windows-gnu-1.96.0-1.hum1 (noarch)\n  * rust-std-static-wasm32-unknown-unknown-1.96.0-1.hum1 (noarch)\n  * rust-std-static-wasm32-wasip1-1.96.0-1.hum1 (noarch)\n  * rust-std-static-x86_64-pc-windows-gnu-1.96.0-1.hum1 (noarch)\n  * rust-std-static-x86_64-unknown-none-1.96.0-1.hum1 (x86_64)\n  * rust-std-static-x86_64-unknown-uefi-1.96.0-1.hum1 (x86_64)\n  * rustfmt-1.96.0-1.hum1 (aarch64, x86_64)\n  * rust-1.96.0-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:22934",
        "url": "https://access.redhat.com/errata/RHSA-2026:22934"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-45149",
        "url": "https://access.redhat.com/security/cve/CVE-2026-45149"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-9358",
        "url": "https://access.redhat.com/security/cve/CVE-2026-9358"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-9697",
        "url": "https://access.redhat.com/security/cve/CVE-2026-9697"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6734",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6734"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-9675",
        "url": "https://access.redhat.com/security/cve/CVE-2026-9675"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-51221",
        "url": "https://access.redhat.com/security/cve/CVE-2026-51221"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_22934.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-09-09T22:30:10+00:00",
      "generator": {
        "date": "2026-09-09T22:30:10+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.18"
        }
      },
      "id": "RHSA-2026:22934",
      "initial_release_date": "2026-06-03T16:10:32+00:00",
      "revision_history": [
        {
          "date": "2026-06-03T16:10:32+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-09T22:30:10+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rust-main@aarch64",
                "product": {
                  "name": "rust-main@aarch64",
                  "product_id": "rust-main@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cargo@1.96.0-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rust-main@x86_64",
                "product": {
                  "name": "rust-main@x86_64",
                  "product_id": "rust-main@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/cargo@1.96.0-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rust-main@src",
                "product": {
                  "name": "rust-main@src",
                  "product_id": "rust-main@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rust@1.96.0-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rust-main@noarch",
                "product": {
                  "name": "rust-main@noarch",
                  "product_id": "rust-main@noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rust-debugger-common@1.96.0-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rust-main@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rust-main@aarch64"
        },
        "product_reference": "rust-main@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rust-main@noarch as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rust-main@noarch"
        },
        "product_reference": "rust-main@noarch",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rust-main@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rust-main@src"
        },
        "product_reference": "rust-main@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rust-main@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:rust-main@x86_64"
        },
        "product_reference": "rust-main@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6734",
      "cwe": {
        "id": "CWE-940",
        "name": "Improper Verification of Source of a Communication Channel"
      },
      "discovery_date": "2026-06-17T19:04:00.272340+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490024"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:rust-main@aarch64",
          "Red Hat Hardened Images:rust-main@noarch",
          "Red Hat Hardened Images:rust-main@src",
          "Red Hat Hardened Images:rust-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6734"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490024",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
        }
      ],
      "release_date": "2026-06-17T16:36:55.439000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:10:32+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22934"
        },
        {
          "category": "workaround",
          "details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
    },
    {
      "cve": "CVE-2026-9358",
      "cwe": {
        "id": "CWE-674",
        "name": "Uncontrolled Recursion"
      },
      "discovery_date": "2026-05-24T07:00:47.549016+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2481006"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in postcss. A remote attacker could exploit a vulnerability in the `toString` function of the AST Serialization component by executing a manipulation, leading to uncontrolled recursion. This uncontrolled recursion can result in a Denial of Service (DoS) condition, making the affected system unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Moderate: This flaw in Postcss can lead to a denial of service (DoS) in applications that process untrusted CSS. The vulnerability arises from uncontrolled recursion in the AST Serialization component when handling specially crafted CSS. Exploitation requires user interaction, such as submitting attacker-controlled CSS, which reduces the risk in environments where CSS is typically pre-compiled or not directly user-modifiable.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:rust-main@aarch64",
          "Red Hat Hardened Images:rust-main@noarch",
          "Red Hat Hardened Images:rust-main@src",
          "Red Hat Hardened Images:rust-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-9358"
        },
        {
          "category": "external",
          "summary": "RHBZ#2481006",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481006"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-9358",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-9358"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9358",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9358"
        },
        {
          "category": "external",
          "summary": "https://gist.github.com/bx33661/581e3a38134601c04e19b4dfc9b459b9",
          "url": "https://gist.github.com/bx33661/581e3a38134601c04e19b4dfc9b459b9"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/submit/813080",
          "url": "https://vuldb.com/submit/813080"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/vuln/365321",
          "url": "https://vuldb.com/vuln/365321"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/vuln/365321/cti",
          "url": "https://vuldb.com/vuln/365321/cti"
        }
      ],
      "release_date": "2026-05-24T05:30:09.671000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:10:32+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22934"
        },
        {
          "category": "workaround",
          "details": "Upgrade to PostCSS 8.5.6 or later. As a workaround, validate and sanitize CSS input before processing with PostCSS to prevent deeply nested or malicious structures from reaching the serializer.",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "postcss-selector-parser: Postcss: Denial of Service via uncontrolled recursion in AST Serialization"
    },
    {
      "cve": "CVE-2026-9675",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2026-06-17T17:01:41.811903+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2489979"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in undici. A malicious WebSocket server could exploit this vulnerability by sending fragmented messages that individually meet size limits but collectively exceed them. This can lead to unbounded memory growth in the client process, resulting in memory exhaustion and a denial of service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undici: undici WebSocket client vulnerable to denial of service via cumulative fragment bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated Moderate by Red Hat (CVSS 5.9) because successful exploitation requires the undici WebSocket client to connect to an attacker-controlled server (AC:H), which is unlikely in typical Red Hat product deployments where WebSocket endpoints are trusted internal services. No Red Hat product is affected \u2014 all streams shipping undici bundle versions 5.x through 7.x, which are outside the vulnerable range of 8.0.0 to 8.4.x. The vulnerable code path (unbounded WebSocket frame accumulation) was introduced in undici 8.0.0 and is not present in earlier major versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:rust-main@aarch64",
          "Red Hat Hardened Images:rust-main@noarch",
          "Red Hat Hardened Images:rust-main@src",
          "Red Hat Hardened Images:rust-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-9675"
        },
        {
          "category": "external",
          "summary": "RHBZ#2489979",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489979"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-9675",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-9675"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9675",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9675"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodejs/undici/security/advisories/GHSA-38rv-x7px-6hhq",
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-38rv-x7px-6hhq"
        }
      ],
      "release_date": "2026-06-17T16:20:32.548000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:10:32+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22934"
        },
        {
          "category": "workaround",
          "details": "Red Hat products that bundle the undici HTTP client ship versions 5.x, 6.x, and 7.x, which do not contain the vulnerable WebSocket frame accumulation code path introduced in undici 8.0.0. No Red Hat product streams are affected by this vulnerability. Users who have manually installed undici 8.x outside of Red Hat-provided packages should upgrade to undici 8.5.0 or later to fully resolve this issue.",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "undici: undici WebSocket client vulnerable to denial of service via cumulative fragment bypass"
    },
    {
      "cve": "CVE-2026-9697",
      "cwe": {
        "id": "CWE-295",
        "name": "Improper Certificate Validation"
      },
      "discovery_date": "2026-06-17T19:03:30.813843+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490018"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:rust-main@aarch64",
          "Red Hat Hardened Images:rust-main@noarch",
          "Red Hat Hardened Images:rust-main@src",
          "Red Hat Hardened Images:rust-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-9697"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490018",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
          "url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
        }
      ],
      "release_date": "2026-06-17T16:46:42.706000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:10:32+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22934"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
    },
    {
      "cve": "CVE-2026-44432",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-05-13T17:01:01.083841+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477154"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:rust-main@aarch64",
          "Red Hat Hardened Images:rust-main@noarch",
          "Red Hat Hardened Images:rust-main@src",
          "Red Hat Hardened Images:rust-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477154",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
        }
      ],
      "release_date": "2026-05-13T15:17:12.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:10:32+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22934"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
    },
    {
      "cve": "CVE-2026-45149",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-29T21:02:00.092772+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2483481"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the brace-expansion library. This vulnerability allows an attacker to cause a Denial of Service (DoS) by providing a large numeric range for expansion. The library allocates excessive memory to generate all intermediate elements before applying the maximum limit, leading to high memory consumption and potential application crashes. This can impact the availability of systems using the library.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat products ship brace-expansion versions 1.x and 2.x, which are not affected by this vulnerability. The flaw exists only in versions 5.0.0 through 5.0.5.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:rust-main@aarch64",
          "Red Hat Hardened Images:rust-main@noarch",
          "Red Hat Hardened Images:rust-main@src",
          "Red Hat Hardened Images:rust-main@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-45149"
        },
        {
          "category": "external",
          "summary": "RHBZ#2483481",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483481"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-45149",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-45149"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45149",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45149"
        },
        {
          "category": "external",
          "summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2",
          "url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2"
        }
      ],
      "release_date": "2026-05-29T19:55:07.337000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-03T16:10:32+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:22934"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:rust-main@aarch64",
            "Red Hat Hardened Images:rust-main@noarch",
            "Red Hat Hardened Images:rust-main@src",
            "Red Hat Hardened Images:rust-main@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.