| dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M |
dnspythonAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Forge: TLS client crash on an unsupported ServerHello compression methodCVE-2026-125332 · GHSA-W4XR-HQV8-CH44 |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Forge: Ed25519 signature verification accepts small-order public keysCVE-2026-125335 · GHSA-6889-VF6X-F3G5 |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| Forge: ReDoS in forge.http response header and cookie trimmingCVE-2026-125333 · GHSA-6CV4-P8M7-4R25 |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDerCVE-2026-119191 · GHSA-RHR8-3PM8-CQ29 |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsageCVE-2026-119189 · GHSA-H46V-RMH6-FQ4F |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Forge: Certificate signature verified with the issuer's RSA signature schemeCVE-2026-118774 · GHSA-9WG5-MJ3P-V49Q |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryptionCVE-2026-118776 · GHSA-2VGQ-WCHC-25W7 |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
کم
|
اصلاح گزارش شده |
|
| protobufjs has an arbitrary code execution issueCVE-2026-41242 · GHSA-XQ3M-2V4X-88GG |
protobufjsOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-rhel8 |
npmRed Hat |
بحرانی
|
اصلاح گزارش شده |
|
| minimatch has potential denial of service via globparts amplificationCVE-2026-118764 · GHSA-G3HV-75WG-M249 |
minimatchCost Management On Premise/costmanagement/costmanagement-ui-rhel10 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-UpCVE-2026-45109 · GHSA-26HH-7CQF-HHC6 |
nextRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-cuda-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG |
lodash-amdlodash-es |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH |
lodash-amdlodash-es |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect TargetsCVE-2026-40895 · GHSA-R4Q5-VMMM-2653 |
follow-redirectsMigration Toolkit for Applications 8/mta/mta-ui-rhel8 |
npmRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| pypdf has possible infinite loop when hitting EOF in standard xref table during trailer searchCVE-2026-119203 · GHSA-5849-834G-HVW5 |
pypdfAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| pypdf has possible large memory usage when parsing page treeCVE-2026-119204 · GHSA-CGGF-277G-3Q54 |
pypdfAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| pypdf has possible infinite loop when cloning dictionariesCVE-2026-119205 · GHSA-MFR5-77XH-9J7H |
pypdfAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13CVE-2026-119190 · GHSA-5X38-2VFF-X55P |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messageCVE-2026-119188 · GHSA-8HRF-8G6F-7XWP |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Forge: Regular expression denial of service in PEM decoding (pem.decode)CVE-2026-118779 · GHSA-7WCH-P9PX-956X |
node-forgeNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 |
npmRed Hat |
زیاد
|
اصلاح گزارش شده |
|
