RHSA-2026:60855

Vulnerability from csaf_redhat - Published: 2026-08-29 14:29 - Updated: 2026-09-22 04:18
Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs: grafana13.1: * grafana13.1-13.1.3-0.3.hum1 (aarch64, x86_64) * grafana13.1-13.1.3-0.3.hum1.src (src) Security Fix(es): grafana13.1: * CVE-2026-6322 * CVE-2026-75899 * CVE-2026-75931 * CVE-2026-75975 * CVE-2026-76172
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-6322

A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Product Identifier Version Remediation
Unresolved product id: Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64 —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src —
Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64 —
Vendor Fix fix
Threats
Impact Important
CVE-2026-75899

A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-140 - Improper Neutralization of Delimiters
Affected products
Fixed 3 products, the same list as for CVE-2026-6322
Threats
Impact Important
CVE-2026-75931

A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Fixed 3 products, the same list as for CVE-2026-6322
Threats
Impact Important
CVE-2026-75975

A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-918 - Server-Side Request Forgery (SSRF)
Affected products
Fixed 3 products, the same list as for CVE-2026-6322
Threats
Impact Important
CVE-2026-76172

A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-76 - Improper Neutralization of Equivalent Special Elements
Affected products
Fixed 3 products, the same list as for CVE-2026-6322
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:60855 self
https://access.redhat.com/security/cve/CVE-2026-6322 external
https://access.redhat.com/security/cve/CVE-2026-75899 external
https://access.redhat.com/security/cve/CVE-2026-75931 external
https://access.redhat.com/security/cve/CVE-2026-75975 external
https://access.redhat.com/security/cve/CVE-2026-76172 external
https://access.redhat.com/security/updates/classi… external
https://images.redhat.com/ external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-6322 self
https://bugzilla.redhat.com/show_bug.cgi?id=2466684 external
https://www.cve.org/CVERecord?id=CVE-2026-6322 external
https://nvd.nist.gov/vuln/detail/CVE-2026-6322 external
https://cna.openjsf.org/security-advisories.html external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75899 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521778 external
https://www.cve.org/CVERecord?id=CVE-2026-75899 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75899 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75931 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521777 external
https://www.cve.org/CVERecord?id=CVE-2026-75931 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75931 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-75975 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521779 external
https://www.cve.org/CVERecord?id=CVE-2026-75975 external
https://nvd.nist.gov/vuln/detail/CVE-2026-75975 external
https://github.com/fastify/fast-uri/security/advi… external
https://access.redhat.com/security/cve/CVE-2026-76172 self
https://bugzilla.redhat.com/show_bug.cgi?id=2521798 external
https://www.cve.org/CVERecord?id=CVE-2026-76172 external
https://nvd.nist.gov/vuln/detail/CVE-2026-76172 external
https://github.com/fastify/fast-uri/security/advi… external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\ngrafana13.1:\n  * grafana13.1-13.1.3-0.3.hum1 (aarch64, x86_64)\n  * grafana13.1-13.1.3-0.3.hum1.src (src)\n\nSecurity Fix(es):\n\ngrafana13.1:\n  * CVE-2026-6322\n  * CVE-2026-75899\n  * CVE-2026-75931\n  * CVE-2026-75975\n  * CVE-2026-76172",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:60855",
        "url": "https://access.redhat.com/errata/RHSA-2026:60855"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6322",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6322"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75899",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75931",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-75975",
        "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-76172",
        "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60855.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
    "tracking": {
      "current_release_date": "2026-09-22T04:18:33+00:00",
      "generator": {
        "date": "2026-09-22T04:18:33+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:60855",
      "initial_release_date": "2026-08-29T14:29:40+00:00",
      "revision_history": [
        {
          "date": "2026-08-29T14:29:40+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-04T00:36:24+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-22T04:18:33+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "grafana13.1-0:13.1.3-0.3.hum1@aarch64",
                "product": {
                  "name": "grafana13.1-0:13.1.3-0.3.hum1@aarch64",
                  "product_id": "grafana13.1-0:13.1.3-0.3.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/grafana13.1@13.1.3-0.3.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "grafana13.1-0:13.1.3-0.3.hum1@src",
                "product": {
                  "name": "grafana13.1-0:13.1.3-0.3.hum1@src",
                  "product_id": "grafana13.1-0:13.1.3-0.3.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/grafana13.1@13.1.3-0.3.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "grafana13.1-0:13.1.3-0.3.hum1@x86_64",
                "product": {
                  "name": "grafana13.1-0:13.1.3-0.3.hum1@x86_64",
                  "product_id": "grafana13.1-0:13.1.3-0.3.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/grafana13.1@13.1.3-0.3.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana13.1-0:13.1.3-0.3.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64"
        },
        "product_reference": "grafana13.1-0:13.1.3-0.3.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana13.1-0:13.1.3-0.3.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src"
        },
        "product_reference": "grafana13.1-0:13.1.3-0.3.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "grafana13.1-0:13.1.3-0.3.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
        },
        "product_reference": "grafana13.1-0:13.1.3-0.3.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6322",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-05-05T11:01:00.332189+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2466684"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI\u0027s intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI\u0027s authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6322"
        },
        {
          "category": "external",
          "summary": "RHBZ#2466684",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6322"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc"
        }
      ],
      "release_date": "2026-05-05T10:29:16.378000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-29T14:29:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60855"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling"
    },
    {
      "cve": "CVE-2026-75899",
      "cwe": {
        "id": "CWE-140",
        "name": "Improper Neutralization of Delimiters"
      },
      "discovery_date": "2026-08-24T09:51:05.559475+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521778"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a loopback address. This vulnerability can lead to Server-Side Request Forgery (SSRF) and bypass host-based security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the `fast-uri` library, used by applications for URI parsing, allows for Server-Side Request Forgery (SSRF) and host-policy bypass. By crafting a doubly percent-encoded hostname in an untrusted HTTP-family URI, an attacker could redirect internal application requests to arbitrary network destinations, potentially bypassing security controls and accessing internal services. This risk is present in Red Hat products that process untrusted URIs using affected versions of `fast-uri`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521778",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521778"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75899",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75899"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf"
        }
      ],
      "release_date": "2026-08-24T09:40:19.801000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-29T14:29:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60855"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding"
    },
    {
      "cve": "CVE-2026-75931",
      "cwe": {
        "id": "CWE-444",
        "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
      },
      "discovery_date": "2026-08-24T09:51:02.191062+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521777"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. This vulnerability arises because the parser fails to consistently convert internationalized domain names (IDN) to their standard ASCII form when processing scheme-relative references. This inconsistency can lead to host confusion, where an application might validate a URI against a security policy using one hostname, but then resolve to a different, potentially malicious, hostname. This discrepancy could allow an attacker to bypass security policies and access unauthorized resources.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521777",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521777"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75931",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75931"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8"
        }
      ],
      "release_date": "2026-08-24T09:30:04.212000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-29T14:29:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60855"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Host confusion via skipped IDN canonicalization"
    },
    {
      "cve": "CVE-2026-75975",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-08-24T10:11:05.356309+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521779"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not fully validate the IPv6 grammar, allowing invalid trailing text in an authority to be silently discarded. This can lead to a malformed, attacker-controlled host being normalized into a different, valid IPv6 destination, such as a local or private IPv6 target. An application normalizing untrusted URLs before outbound requests, redirects, or proxy routing could be redirected, resulting in a server-side request forgery (SSRF) and address-policy bypass.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521779",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521779"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-75975",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75975"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc"
        }
      ],
      "release_date": "2026-08-24T09:58:07.698000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-29T14:29:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60855"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization"
    },
    {
      "cve": "CVE-2026-76172",
      "cwe": {
        "id": "CWE-76",
        "name": "Improper Neutralization of Equivalent Special Elements"
      },
      "discovery_date": "2026-08-24T10:31:12.887477+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2521798"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in fast-uri, a software component used for parsing Uniform Resource Identifiers (URIs) in Node.js applications. This vulnerability arises from an issue in how fast-uri processes the scheme part of a URI, specifically when it contains special characters that are percent-encoded. An attacker can exploit this by crafting a malicious URI, causing the parser to misinterpret the host, which can lead to serious security risks. These risks include unauthorized redirection to external websites, server-side request forgery (SSRF) where the application makes unintended requests to internal or external resources, and bypassing security policies.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
          "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "RHBZ#2521798",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2521798"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-76172",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76172"
        },
        {
          "category": "external",
          "summary": "https://cna.openjsf.org/security-advisories.html",
          "url": "https://cna.openjsf.org/security-advisories.html"
        },
        {
          "category": "external",
          "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp",
          "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-jqff-g426-hqxp"
        }
      ],
      "release_date": "2026-08-24T10:07:56.440000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-29T14:29:40+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:60855"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@aarch64",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@src",
            "Red Hat Hardened Images:grafana13.1-0:13.1.3-0.3.hum1@x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.