RHSA-2026:7655HighCVSS 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published
April 11, 2026
Last Modified
July 6, 2026

🔗 CVE IDs covered (3)

📋 Description

CVE-2026-2950 — lodash: Lodash: Prototype pollution allows deletion of built-in prototype properties via array path bypass CVE-2026-45149 — brace-expansion: brace-expansion: Denial of Service due to excessive memory allocation when expanding large numeric ranges CVE-2026-45736 — ws: ws: Uninitialized memory disclosure via websocket.close() with TypedArray

🔗 References (7)