| Active Storage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud StorageCVE-2026-126085 · GHSA-HFR4-8RJC-97M2 |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
Medium
|
Fix reported |
|
| Active Support: Possible DoS vulnerability in Active Support safe_constantizeCVE-2026-126080 · GHSA-8474-XRP6-WH69 |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
High
|
Fix reported |
|
| Active Storage: Possible DoS vulnerability in Active Storage filename handlingCVE-2026-126074 · GHSA-P2PM-G2H6-7J5J |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
Medium
|
Fix reported |
|
| Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingressCVE-2026-126068 · GHSA-5957-C7QM-M469 |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
Low
|
Fix reported |
|
| Action Pack: Possible cache poisoning in Action Pack content negotiationCVE-2026-126073 · GHSA-R9JG-FMFX-2GV6 |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
Medium
|
Fix reported |
|
| Action Pack: Missing SameSite attribute on session cookies from Action Pack session storesCVE-2026-126067 · GHSA-GMJ8-HVJ3-49MW |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
Low
|
Fix reported |
|
| Action Pack: Possible restoration of destroyed sessions in Action Dispatch CacheStoreCVE-2026-126076 · GHSA-2586-8GHR-69FJ |
Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
Red HatRubyGems |
Medium
|
Fix reported |
|
| Forge: TLS client crash on an unsupported ServerHello compression methodCVE-2026-125332 · GHSA-W4XR-HQV8-CH44 |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| Forge: Ed25519 signature verification accepts small-order public keysCVE-2026-125335 · GHSA-6889-VF6X-F3G5 |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
Low
|
Fix reported |
|
| Forge: ReDoS in forge.http response header and cookie trimmingCVE-2026-125333 · GHSA-6CV4-P8M7-4R25 |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| JRuby: NONET is bypassed for external DTDs and entities when the systemId uses a short-form IPv4 hostCVE-2026-126062 · GHSA-V995-44V6-5FQM |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
Low
|
Fix reported |
|
| Nokogiri: Use-After-Free in Nokogiri when replacing an attribute valueCVE-2026-126064 · GHSA-3W22-6JFG-527W |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
Low
|
Fix reported |
|
| Nokogiri: Mutation XSS through `noscript` content in Nokogiri's HTML5 serializerCVE-2026-126063 · GHSA-4P39-36WJ-23H4 |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
Low
|
Fix reported |
|
| Rack: Multipart boundary ambiguity guard in Rack::Multipart::Parser can be bypassed with a quoted boundary value, allowing WAF bypassCVE-2026-125108 · GHSA-P8X9-V4HV-2W4G |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
Low
|
Fix reported |
|
| Rack: Rack::Static header_rules bypass via dot-segment normalization mismatchCVE-2026-125110 · GHSA-WVG4-6P58-3GH3 |
Red Hat 3scale API Management Platform 2/3scale-amp2/backend-rhel8Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel8 |
Red HatRubyGems |
Medium
|
Fix reported |
|
| minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 |
minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
Medium
|
Fix reported |
|
| Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG |
lodash-amdlodash-es |
npmRed Hat |
Medium
|
Fix reported |
|
| lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH |
lodash-amdlodash-es |
npmRed Hat |
Medium
|
Fix reported |
|
| Forge: TLS client crash when the server sends no certificateCVE-2026-118778 · GHSA-525V-9GP9-W22H |
node-forgeRed Hat 3scale API Management Platform 2/3scale-amp2/system-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-CookieCVE-2026-118777 · GHSA-6WVX-3R32-XMCG |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
