RHSA-2026:49714HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
August 3, 2026
Last Modified
August 9, 2026

🔗 CVE IDs covered (6)

CVE-2026-67316 →CVE-2026-67317 →CVE-2026-67318 →CVE-2026-67313 →CVE-2026-67314 →CVE-2026-67315 →

📋 Description

CVE-2026-67313 — axios: axios: Denial of Service via uncontrolled recursion in formDataToJSON CVE-2026-67314 — axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth CVE-2026-67315 — axios: axios: NO_PROXY bypass allows exposure of local services CVE-2026-67316 — axios: axios: Prototype Pollution allows unauthorized data transmission and network redirection CVE-2026-67317 — axios: axios: Denial of Service via maxBodyLength bypass with ReadableStream CVE-2026-67318 — axios: axios: Denial of Service due to maxBodyLength bypass in HTTP/2 requests

🎯 Affected products4

  • Red Hat Hardened Images
  • grafana13-1-main@aarch64 as a component of Red Hat Hardened Images
  • grafana13-1-main@src as a component of Red Hat Hardened Images
  • grafana13-1-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/

🔗 References (10)