RHSA-2026:69289
Vulnerability from csaf_redhat - Published: 2026-09-21 11:15 - Updated: 2026-09-22 08:54Summary
Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
Severity
Important
Notes
Topic: A Subscription Management tool for finding and reporting Red Hat product usage
Details: Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds,
identifies, and reports environment data, or facts, such as the number of physical and virtual
systems on a network, their operating systems, and relevant configuration data stored within
them. Discovery also identifies and reports more detailed facts for some versions of key
Red Hat packages and products that it finds in the network.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in urllib3. A remote attacker could exploit this vulnerability by sending a specially crafted compressed payload to an application using urllib3's streaming API with Brotli support. This could lead to an out-of-memory (OOM) condition due to uncontrolled decompression, resulting in a denial of service (DoS) for the affected application. The issue bypasses existing length protections, allowing for unlimited decompression of malicious content.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64 | — |
Vendor Fix
fix
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64 | — | ||
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64 | — |
Threats
Impact
Important
A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.
5.3 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the `group_comments` function to repeatedly rescan these statements, leading to excessive CPU consumption and a Denial of Service (DoS) for the application using the parser.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-9375
Known not affected
2 products, the same list as for
CVE-2026-9375
Threats
Impact
Important
A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59879
Known not affected
2 products, the same list as for
CVE-2026-59879
Threats
Impact
Important
A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker's host as legitimate.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59879
Known not affected
2 products, the same list as for
CVE-2026-59879
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59879
Known not affected
2 products, the same list as for
CVE-2026-59879
Threats
Impact
Moderate
A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59879
Known not affected
2 products, the same list as for
CVE-2026-59879
Threats
Impact
Important
A flaw was found in the `compression` Node.js and Express middleware. A remote unauthenticated attacker can exploit this vulnerability by repeatedly initiating and then prematurely aborting connections while compressed responses are being sent. This action prevents the zlib stream, used for compression, from being properly destroyed, leading to a memory leak. Over time, this memory exhaustion can cause the server to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59879
Known not affected
2 products, the same list as for
CVE-2026-59879
Threats
Impact
Important
References
66 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A Subscription Management tool for finding and reporting Red Hat product usage",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds,\nidentifies, and reports environment data, or facts, such as the number of physical and virtual\nsystems on a network, their operating systems, and relevant configuration data stored within\nthem. Discovery also identifies and reports more detailed facts for some versions of key\nRed Hat packages and products that it finds in the network.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:69289",
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59879",
"url": "https://access.redhat.com/security/cve/CVE-2026-59879"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-71491",
"url": "https://access.redhat.com/security/cve/CVE-2026-71491"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-82417",
"url": "https://access.redhat.com/security/cve/CVE-2026-82417"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84292",
"url": "https://access.redhat.com/security/cve/CVE-2026-84292"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
"url": "https://access.redhat.com/security/cve/CVE-2026-84375"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84394",
"url": "https://access.redhat.com/security/cve/CVE-2026-84394"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-87776",
"url": "https://access.redhat.com/security/cve/CVE-2026-87776"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9375",
"url": "https://access.redhat.com/security/cve/CVE-2026-9375"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery",
"url": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69289.json"
}
],
"title": "Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage",
"tracking": {
"current_release_date": "2026-09-22T08:54:12+00:00",
"generator": {
"date": "2026-09-22T08:54:12+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:69289",
"initial_release_date": "2026-09-21T11:15:44+00:00",
"revision_history": [
{
"date": "2026-09-21T11:15:44+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-21T11:15:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-22T08:54:12+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Discovery 2",
"product": {
"name": "Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:discovery:2::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Discovery"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"product": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-server-rhel9@sha256%3Ad8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198?arch=amd64\u0026repository_url=registry.redhat.io/discovery/discovery-server-rhel9\u0026tag=1789675186"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64",
"product": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64",
"product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-ui-rhel9@sha256%3Ab2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf?arch=amd64\u0026repository_url=registry.redhat.io/discovery/discovery-ui-rhel9\u0026tag=1789677459"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"product": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"product_id": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-server-rhel9@sha256%3A7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93?arch=arm64\u0026repository_url=registry.redhat.io/discovery/discovery-server-rhel9\u0026tag=1789675186"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"product": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"product_id": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/discovery-ui-rhel9@sha256%3A7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0?arch=arm64\u0026repository_url=registry.redhat.io/discovery/discovery-ui-rhel9\u0026tag=1789677459"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64"
},
"product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
},
"product_reference": "registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64"
},
"product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"relates_to_product_reference": "Red Hat Discovery 2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64 as a component of Red Hat Discovery 2",
"product_id": "Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
},
"product_reference": "registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64",
"relates_to_product_reference": "Red Hat Discovery 2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-9375",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-06-19T20:00:55.611634+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490897"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib3. A remote attacker could exploit this vulnerability by sending a specially crafted compressed payload to an application using urllib3\u0027s streaming API with Brotli support. This could lead to an out-of-memory (OOM) condition due to uncontrolled decompression, resulting in a denial of service (DoS) for the affected application. The issue bypasses existing length protections, allowing for unlimited decompression of malicious content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib3: urllib3: Denial of Service via decompression bomb bypass with Brotli support",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9375"
},
{
"category": "external",
"summary": "RHBZ#2490897",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490897"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9375"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9375",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9375"
},
{
"category": "external",
"summary": "https://github.com/urllib3/urllib3/commit/2bdcc44d1e163fb5cc48a8662425e35e15adfe6a",
"url": "https://github.com/urllib3/urllib3/commit/2bdcc44d1e163fb5cc48a8662425e35e15adfe6a"
},
{
"category": "external",
"summary": "https://huntr.com/bounties/ddd09eb9-b87d-4a43-84df-48837b1bbc23",
"url": "https://huntr.com/bounties/ddd09eb9-b87d-4a43-84df-48837b1bbc23"
}
],
"release_date": "2026-06-19T18:45:10.409000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T11:15:44+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib3: urllib3: Denial of Service via decompression bomb bypass with Brotli support"
},
{
"cve": "CVE-2026-59879",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-07-08T17:02:16.432203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498158"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service vulnerability in Immutable.js affects Red Hat products that process untrusted input through List operations. An attacker can trigger an infinite loop or unbounded memory allocation by providing specially crafted large index values, leading to a service disruption. Additionally, silent data corruption may occur due to integer wrapping.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59879"
},
{
"category": "external",
"summary": "RHBZ#2498158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498158"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84",
"url": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a",
"url": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735"
}
],
"release_date": "2026-07-08T15:47:24.885000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T11:15:44+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should implement input validation to reject or clamp any externally supplied List index or key-path segment that exceeds a sane maximum, specifically values greater than or equal to 2^30. Additionally, running request handling in isolated worker processes with capped heap sizes (e.g., using `--max-old-space-size`) can contain the impact of a potential process abort.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations"
},
{
"cve": "CVE-2026-71491",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-17T17:31:07.770327+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517518"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the `group_comments` function to repeatedly rescan these statements, leading to excessive CPU consumption and a Denial of Service (DoS) for the application using the parser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in comment grouping",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71491"
},
{
"category": "external",
"summary": "RHBZ#2517518",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517518"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71491",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71491"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71491",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71491"
},
{
"category": "external",
"summary": "https://github.com/andialbrecht/sqlparse/commit/ef2012a5eeb491e604dea2b00d516904a3830c87",
"url": "https://github.com/andialbrecht/sqlparse/commit/ef2012a5eeb491e604dea2b00d516904a3830c87"
},
{
"category": "external",
"summary": "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-f2ff-p2ww-7p4p",
"url": "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-f2ff-p2ww-7p4p"
}
],
"release_date": "2026-08-17T17:16:48.973000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T11:15:44+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in comment grouping"
},
{
"cve": "CVE-2026-82417",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-08-30T00:00:50.379994+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525936"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object\u0027s constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper validation in stringify function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service vulnerability was found in the qs package for Node.js. The stringify function does not verify that constructor.isBuffer is callable before invoking it. An attacker who can influence object shape, for example through query parameters parsed with allowPrototypes: true as Express 4 does by default, can cause qs.stringify to throw a TypeError when that data is re-serialized. In typical Node.js HTTP frameworks the error is caught per request and returns HTTP 500. In code paths without an error boundary, such as async handlers or background jobs, the process may exit.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-82417"
},
{
"category": "external",
"summary": "RHBZ#2525936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525936"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-82417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-82417"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6",
"url": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g"
}
],
"release_date": "2026-08-29T23:51:27.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T11:15:44+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
},
{
"category": "workaround",
"details": "If an immediate upgrade to qs 6.16.0 is not feasible, avoid re-serializing attacker-influenced parsed query or body objects with qs.stringify. Where qs.parse is used directly, set allowPrototypes: false unless prototype keys are required. For Express applications, review whether the default query parser configuration is necessary. Wrapping qs.stringify calls in try/catch can limit impact to individual requests.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper validation in stringify function"
},
{
"cve": "CVE-2026-84292",
"cwe": {
"id": "CWE-140",
"name": "Improper Neutralization of Delimiters"
},
"discovery_date": "2026-09-02T20:21:15.599288+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527747"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This component improperly serializes the port component of a Uniform Resource Identifier (URI) without validating its content. A remote attacker can exploit this by crafting a malicious port value that injects authority delimiters. This manipulation can demote the intended host to user information and redirect the authority to an attacker-controlled host, leading to information disclosure as applications interpret the attacker\u0027s host as legitimate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. Applications utilizing the `fast-uri` library in Red Hat environments are susceptible to authority injection if they process untrusted data as the port component of a URI. This could allow an attacker to redirect network traffic to an arbitrary host, compromising communication integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84292"
},
{
"category": "external",
"summary": "RHBZ#2527747",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527747"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84292"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3"
}
],
"release_date": "2026-09-02T20:09:51.415000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T11:15:44+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization"
},
{
"cve": "CVE-2026-84375",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-09-01T21:51:30.205823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527118"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84375"
},
{
"category": "external",
"summary": "RHBZ#2527118",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
"url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
"url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
"url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/pull/797",
"url": "https://github.com/nodeca/js-yaml/pull/797"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
}
],
"release_date": "2026-09-01T21:43:13.617000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T11:15:44+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
},
{
"cve": "CVE-2026-84394",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-09-02T20:31:21.036047+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. The library incorrectly processes Uniform Resource Identifier (URI) hosts containing unbalanced brackets, leading to a discrepancy in how the host is parsed by fast-uri compared to other HTTP clients. This host confusion can allow an attacker to bypass security policies, such as Server-Side Request Forgery (SSRF) denylists or redirect allowlists, by causing an application to evaluate its policy against an incorrect host string. This could result in unintended network requests or access to unauthorized resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is rated Moderate because successful exploitation requires a specific configuration where fast-uri handles security checks but a different client resolves the URL, enabling security policy bypasses without direct code execution. This affects fast-uri versions 2.4.5, 3.1.6, and 4.1.3 (fixed in 2.4.6, 3.1.7, and 4.1.4).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84394"
},
{
"category": "external",
"summary": "RHBZ#2527756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84394",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84394"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84394"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g"
}
],
"release_date": "2026-09-02T20:25:35.399000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T11:15:44+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies"
},
{
"cve": "CVE-2026-87776",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-09-11T11:40:59.000487+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531852"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `compression` Node.js and Express middleware. A remote unauthenticated attacker can exploit this vulnerability by repeatedly initiating and then prematurely aborting connections while compressed responses are being sent. This action prevents the zlib stream, used for compression, from being properly destroyed, leading to a memory leak. Over time, this memory exhaustion can cause the server to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "compression: compression: Denial of Service via memory leak on premature response close",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as Important. A remote unauthenticated attacker can cause a denial of service by repeatedly aborting connections while compressed responses are being sent, which can lead to memory exhaustion and server termination.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"known_not_affected": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-87776"
},
{
"category": "external",
"summary": "RHBZ#2531852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531852"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-87776",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87776"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87776",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87776"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95",
"url": "https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95"
}
],
"release_date": "2026-09-11T11:24:55.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-21T11:15:44+00:00",
"details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:69289"
},
{
"category": "workaround",
"details": "Update the compression middleware to version 1.8.2 or later. No supported workaround is currently available if the affected version cannot be updated.",
"product_ids": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:7504b5b4e7a6efc09b4867c4e3ae29338fd758acf4e7e0fb7aec2d2979d8df93_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-server-rhel9@sha256:d8ddf4f17643611e504a71519be81ceb79e61f41632be3f327f4fbe2a1e5e198_amd64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:7f9f86aa64673b84d7982c03fe7e70627ed8c4f1dbefe59110eb13f4af0573c0_arm64",
"Red Hat Discovery 2:registry.redhat.io/discovery/discovery-ui-rhel9@sha256:b2491e82a198efc1ceccd9eb383dbebbb1e4251a9bf4628471b099a5a037cfaf_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "compression: compression: Denial of Service via memory leak on premature response close"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…