RHSA-2026:34527HighCVSS 8.7

Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-frontend-rhel9 container image

Published
July 1, 2026
Last Modified
August 30, 2026

🔗 CVE IDs covered (4)

📋 Description

CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data CVE-2026-44487 — axios: Axios: Information disclosure of proxy credentials via redirect flows CVE-2026-44488 — axios: Axios: Denial of Service due to unenforced request and response size limits CVE-2026-44494 — axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution

🎯 Affected products2

  • Red Hat Satellite 6.19
  • registry.redhat.io/satellite/iop-host-inventory-frontend-rhel9@sha256:a3865229f5dfcfd023518551a61cbc73bdddcfe3f830ad9810aaaf4a17e32d14_amd64 as a component of Red Hat Satellite 6.19

✅ Remediation

For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (11)