RHSA-2026:92510CriticalCVSS 8.8

Red Hat Security Advisory: RHOAI 3.4.6 - Red Hat OpenShift AI

Published
October 29, 2026
Last Modified
October 31, 2026

🔗 CVE IDs covered (106)

CVE-2026-57516 →CVE-2026-67314 →CVE-2026-93749 →CVE-2026-112405 →CVE-2026-112893 →CVE-2026-33814 →CVE-2026-56862 →CVE-2026-96804 →CVE-2026-106445 →CVE-2026-112896 →CVE-2026-67321 →CVE-2026-75931 →CVE-2026-84445 →CVE-2026-96644 →CVE-2026-102276 →CVE-2026-112392 →CVE-2026-42502 →CVE-2026-110857 →CVE-2026-111066 →CVE-2026-112390 →CVE-2026-112397 →CVE-2026-114145 →CVE-2026-41178 →CVE-2026-59951 →CVE-2026-82397 →CVE-2026-90711 →CVE-2026-104851 →CVE-2026-111064 →CVE-2026-77301 →CVE-2026-83663 →CVE-2026-96778 →CVE-2026-102272 →CVE-2026-102278 →CVE-2026-112400 →CVE-2026-112897 →CVE-2026-26007 →CVE-2026-56858 →CVE-2026-69097 →CVE-2026-73089 →CVE-2026-75975 →CVE-2026-85393 →CVE-2026-65898 →CVE-2026-17106 →CVE-2026-39834 →CVE-2026-56860 →CVE-2026-69153 →CVE-2026-75838 →CVE-2026-96640 →CVE-2026-109383 →CVE-2026-39821 →CVE-2026-93690 →CVE-2026-97689 →CVE-2026-109829 →CVE-2026-110858 →CVE-2026-112399 →CVE-2026-63374 →CVE-2026-75899 →CVE-2026-112402 →CVE-2026-112940 →CVE-2026-16221 →CVE-2026-18446 →CVE-2026-67312 →CVE-2026-102267 →CVE-2026-106446 →CVE-2026-109527 →CVE-2026-13717 →CVE-2026-33818 →CVE-2026-73088 →CVE-2026-78679 →CVE-2026-92599 →CVE-2026-102271 →CVE-2026-102282 →CVE-2026-110856 →CVE-2026-45819 →CVE-2026-56859 →CVE-2026-76844 →CVE-2026-85525 →CVE-2026-109156 →CVE-2026-111497 →CVE-2026-112894 →CVE-2026-112895 →CVE-2023-54404 →CVE-2026-27136 →CVE-2026-56853 →CVE-2026-67320 →CVE-2026-73086 →CVE-2026-76172 →CVE-2026-84375 →CVE-2026-87018 →CVE-2026-11824 →CVE-2026-63209 →CVE-2026-73643 →CVE-2026-91990 →CVE-2026-104150 →CVE-2026-105922 →CVE-2026-109869 →CVE-2026-109956 →CVE-2026-11822 →CVE-2026-45820 →CVE-2026-94637 →CVE-2026-96643 →CVE-2026-97687 →CVE-2026-110859 →CVE-2026-112391 →CVE-2026-112404 →CVE-2026-25681 →

📋 Description

CVE-2023-54404 — zod: zod: Denial of service via unbounded array validation CVE-2026-11822 — sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11824 — sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 CVE-2026-13717 — RHOAI MaaS: llm-d: MaaS/llm-d inference Gateway: default allowedRoutes.namespaces.from: All allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs) CVE-2026-16221 — fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency CVE-2026-17106 — github.com/moby/go-archive: moby/go-archive: Arbitrary file write via link following in tar extraction CVE-2026-18446 — fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority CVE-2026-25681 — golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting CVE-2026-26007 — cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves CVE-2026-27136 — golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-33814 — net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-39821 — golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39834 — golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write CVE-2026-41178 — github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers CVE-2026-42502 — golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering CVE-2026-45819 — baseline-browser-mapping: baseline-browser-mapping: Denial of Service via improper input handling CVE-2026-45820 — fflate: fflate: Denial of Service via crafted ZIP archives CVE-2026-56853 — net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56858 — html/template: golang: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56859 — encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue CVE-2026-56860 — net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56862 — crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages CVE-2026-57516 — ray: Ray: Remote code execution via unsafe deserialization in WebDataset reader CVE-2026-59951 — mcp: mcp: Denial of Service via session memory exhaustion in streamable HTTP servers CVE-2026-63209 — github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing CVE-2026-63374 — anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding CVE-2026-65898 — dompurify: DOMPurify: Cross-site scripting via permanent attribute allowlist pollution CVE-2026-67312 — axios: axios: Denial of Service via uncontrolled recursion in form data processing CVE-2026-67314 — axios: axios: Outbound Request Tampering via Prototype Pollution in Basic Auth CVE-2026-67320 — axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter CVE-2026-67321 — axios: axios: Denial of Service via object serialization bypass CVE-2026-69097 — gitpython: GitPython: Remote Code Execution via Config Injection in Submodule Names CVE-2026-69153 — postcss: PostCSS: Information disclosure via crafted sourceMappingURL CVE-2026-73086 — nanoid: nanoid: Predictable ID generation due to integer overflow CVE-2026-73088 — browserslist: Browserslist: Prototype pollution leading to denial of service CVE-2026-73089 — browserslist: Browserslist: Denial of Service via unbounded memory growth from distinct query results CVE-2026-73643 — js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections CVE-2026-75838 — dompurify: DOMPurify: Cross-Site Scripting via IN_PLACE sanitization CVE-2026-75899 — fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding CVE-2026-75931 — fast-uri: fast-uri: Host confusion via skipped IDN canonicalization CVE-2026-75975 — fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization CVE-2026-76172 — fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects CVE-2026-76844 — webpack-dev-middleware: webpack-dev-middleware: Information Disclosure via Path Traversal CVE-2026-77301 — adm-zip: adm-zip: Denial of Service via uncontrolled memory allocation CVE-2026-78679 — GitPython: GitPython: Arbitrary file read via TagReference.create() CVE-2026-82397 — python-tornado: Tornado: Denial of Service via excessive URL-encoded body fields CVE-2026-83663 — github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports CVE-2026-84375 — js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-85393 — node-forge: node-forge: Signature forgery vulnerability in RSA PKCS#1 v1.5 verification CVE-2026-85525 — snowflake-connector-python: github.com/snowflakedb/snowflake-go: snowflake-sdk: net.snowflake/snowflake-jdbc: Snowflake Drivers: Data interception via improper OCSP response validation CVE-2026-87018 — undici: undici: Denial of Service via TLS renegotiation with mismatched certificate CVE-2026-90711 — proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet CVE-2026-91990 — tornado: Tornado: Denial of Service via memory amplification in multipart parsing CVE-2026-92599 — joi: joi: Denial of Service via isoDate validation regular expression CVE-2026-93690 — uri-js: uri-js: Denial of Service via malformed path segments CVE-2026-93749 — source-map-js: source-map-js: Denial of Service via malformed indexed source maps CVE-2026-94637 — github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data CVE-2026-96640 — pillow: pillow: Denial of Service via duplicate page references in PDF files CVE-2026-96643 — pillow: pillow: Denial of Service via repeated EXIF headers CVE-2026-96644 — pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser CVE-2026-96778 — pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow CVE-2026-96804 — mlflow: MLflow: Arbitrary Code Execution via Insecure Deserialization CVE-2026-97687 — urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override CVE-2026-97689 — urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-102267 — pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects CVE-2026-102271 — pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets CVE-2026-102272 — pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling CVE-2026-102276 — brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns CVE-2026-102278 — brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns CVE-2026-102282 — adm-zip: adm-zip: Privilege escalation via unfiltered permission bits in extracted archives CVE-2026-104150 — http-server: http-server: Denial of Service via inefficient regular expression in slug route matcher CVE-2026-104851 — fsspec: fsspec: arbitrary code execution via unrestricted template rendering in ReferenceFileSystem CVE-2026-105922 — vllm: vLLM: Denial of Service via crafted inference request with prompt embeddings CVE-2026-106445 — handlebars: Handlebars: JavaScript Injection via Own Property Check Bypass CVE-2026-106446 — handlebars: Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) CVE-2026-109156 — mlserver: MLServer: Arbitrary file write via path traversal in environment archive extraction CVE-2026-109383 — undici: undici: Certificate validation bypass via dropped TLS options in Agent CVE-2026-109527 — mcp: mcp: Denial of Service via unbounded HTTP request body buffering CVE-2026-109829 — undici: undici: Cache poisoning and information disclosure via improper cross-origin redirect caching CVE-2026-109869 — undici: undici: Denial of Service via unhandled stream error on excessive content encodings CVE-2026-109956 — nltk: nltk: Arbitrary file write via path traversal in WekaClassifier CVE-2026-110856 — GitPython: GitPython: Denial of Service via regular expression backtracking in date parsing CVE-2026-110857 — GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handling CVE-2026-110858 — GitPython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec CVE-2026-110859 — GitPython: GitPython: Arbitrary file read via argument injection in branch checkout CVE-2026-111064 — aiohttp: aiohttp: Denial of Service via missing initial request timeout CVE-2026-111066 — aiohttp: aiohttp: Denial of Service via file descriptor exhaustion in multipart request processing CVE-2026-111497 — brotli: Out-of-Bounds Write in Google Brotli Decoder CVE-2026-112390 — pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing CVE-2026-112391 — pillow: Pillow: Denial of Service via unbounded recursion in PDF parser CVE-2026-112392 — pillow: pillow: Denial of Service via zero-size images in rank filters CVE-2026-112397 — pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images CVE-2026-112399 — pillow: pillow: Denial of service via crafted APNG image CVE-2026-112400 — pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image CVE-2026-112402 — pillow: pillow: Denial of service via double free during image transformation CVE-2026-112404 — pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding CVE-2026-112405 — pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() CVE-2026-112893 — pillow: Pillow: Denial of Service via invalid pointer free during font rendering CVE-2026-112894 — pillow: pillow: Denial of Service via crafted multi-frame image conversion CVE-2026-112895 — pillow: pillow: Denial of service via crafted PDF during append operations CVE-2026-112896 — pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder CVE-2026-112897 — pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding CVE-2026-112940 — filelock: filelock: Arbitrary file overwrite via insecure database file reopening CVE-2026-114145 — GitPython: GitPython: arbitrary code execution via improper submodule path validation

🎯 Affected products200

  • Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:3e4eebd375d0cd028e91c0850ceee01a0646d02862bbc538952bb32023459e37_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:c0b8fd2b558fc6e5d2fb40f87f0894629a613f1fccb9c1fa8e2afcb0604debbb_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:ca26546e866ee9b7d81d0fa0116151789639870093a35d34fc4f70237582c2a5_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:e99cccdc3638cf714528aa425efb3c4ebb6cb745edbdca81d9f569fde1aba6fb_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-automl-rhel9@sha256:5dae3b382c38ab708c24e2c8228bbd1c927c84a35680fd0161bb4c0fa1760cdf_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-automl-rhel9@sha256:6a81c1c800b9f089597dd9781d02994d68c434d3df15c2cf9e3e73c2e98b4330_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-automl-rhel9@sha256:8a50268b3b3ef28e6f5667adf51cb3cd77196e929019c9e1fa00ceaa0ba0099b_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-automl-rhel9@sha256:8fd3811021bf5ea93711995a9e570d8fadee67d0ac7a8d5c2bf976f28b412c7c_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-autorag-rhel9@sha256:4688ef50c9d197a3d642b54c22de9e230a4db28bc66711e9ead96a902c1bdce2_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-autorag-rhel9@sha256:6412ef64ba140e98f69bd728190dac35da33d7ec53bb7fe2d16f3c187c409856_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-autorag-rhel9@sha256:7a6925be69e7f2be4e46b7817ceaef01d8b52377a476f020206119661674558b_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-autorag-rhel9@sha256:b677bfe11a34801334407cb1084055e5fb93a5820f95ad7e8ac4342a1a7cf758_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:011e85095dc7f39207c454835257cfbea14002a1800e70491b51d13aacb780fa_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:2f48c7013e51009ff491c4d23d86f096f51a13843478ebb59c170e74d414fcd6_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:8c85d516c1ce4f7982cf0a63104db066740f6c46fed9f9a1c265fded87fcee0a_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:cd6f42947ee3d25aaaf6660856aae747dd6bcbd2e1e33450203899eb9b1fd227_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-cli-rhel9@sha256:bb94bb74b5bede918ee47a5507321ff9593bf7d3a306aa434fe0b151e0f84de1_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-cli-rhel9@sha256:e06822eb9f071632a7e1b19f037a57d985e3841c9302f35881a0afe6484705f3_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:0bbb81d220aab030384e1e934c45fa85457fd484a291af0e285803dc82af4399_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:35389199bd3faa0eab214cd1328af55610628dd6768bb651043ec9d73b85afe9_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:b0603e3356153b8ff7beca409663fb567d9dbf003dbdd410dd57e7274ee50eb6_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:d47a2a39ef0439ccd062452b6e240f7866992f846828772a6dd181485f5b5fa1_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:16cba7a986d4634c3a5c801b0889ac5503261b0e7c5bc3d52994a0062ea20d6b_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:7b5003a37ef3c7eb4c0e7a9474316be7e08ea1040ece80fd71f4a6ba2aaf66ee_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:9bf9d2c34efa25a7e904c7fcb0aa7dd1d92d36967ac9ec2f01328652fc30992e_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:8942966280617e632e1d26399f81a735f228c8db254b1f5d51bc16053d543f46_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:dcac6c7fbd3ecab6ff113d8f2a345d1ef0d40adacebfc6a9f7d2cb85088dfe29_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:e7cc2fd34ccf1f06ee600f4d166610551d72fe44a8dff038848a232315ce3bb0_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:54fa3ed160e25efb3fa189f554950c3f831404b9c0b2efb782f7b7a5611eb626_arm64 as a component of Red Hat OpenShift AI 3.4
  • +170 more not shown

✅ Remediation

For Red Hat OpenShift AI 3.4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: You can restrict Gateway access to some namespaces only. However, it does not prevent someone from an authorized namespace to hijack the traffic of another. Fully locking down access to the MaaS Gateway is a solution, however it defeats the self-service approach of the component. Workaround: To mitigate this issue, avoid processing tar archives from untrusted sources. When handling archives from potentially untrusted origins, ensure that the extraction process is executed with the least privileges necessary to limit the impact of any arbitrary file write attempts. Workaround: To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS. Workaround: Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds. Workaround: Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input. Workaround: There is no available mitigation for this flaw other than updating the bundled fflate library to a fixed version (0.8.3 or later). Where the application controls the input, avoid passing untrusted ZIP archives to fflate's unzip()/unzipSync() APIs. Workaround: To mitigate this issue, restrict the processing of untrusted tar archives by the Ray WebDataset reader. Ensure that only verified and trusted data sources are supplied to the `read_webdataset()` function. Implement strict access controls and input validation for data ingestion pipelines that interact with Ray's WebDataset reader to prevent the introduction of malicious archives. Workaround: Upgrade to axios >= 1.18.0 (1.x) or >= 0.33.0 (0.x), which add recursion depth guards to formDataToJSON. If an immediate upgrade is not possible, validate and limit the nesting depth of FormData field names before passing them to axios.formToJSON() or before sending FormData through axios with Content-Type: application/json, and ensure error handling is in place to catch RangeError exceptions from this code path. Workaround: To mitigate this issue, users should avoid cloning or creating submodules from untrusted Git repositories. Exercise caution when interacting with Git repositories from unknown or unverified sources, as processing malicious submodule names can lead to configuration injection and potential remote code execution. Always ensure the integrity and trustworthiness of Git repositories before performing operations that involve submodule creation or cloning. Workaround: Pass map: false when invoking PostCSS to disable source map auto-loading. This prevents the path traversal from being triggered, though it removes source map support entirely. Workaround: To reduce exposure, ensure that the `browserslist` tool processes only trusted `browserslist-stats.json`, `opts.stats`, and CLI `--stats` data. Avoid using the tool with untrusted input sources in development or build environments. If `browserslist` is integrated into automated pipelines, validate all input data originates from trusted sources. Workaround: To mitigate this issue, restrict applications from processing untrusted YAML input with affected versions of the `js-yaml` library. Implement strict input validation to ensure that only trusted and well-formed YAML data is processed. If the application is exposed to external, untrusted sources, consider isolating the application or implementing additional resource limits to prevent complete service disruption. Workaround: To mitigate this vulnerability, avoid using DOMPurify with a custom IN_PLACE sanitization configuration that includes an element-removal hook. Default DOMPurify configurations are not affected by this flaw. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Until updates are available, restrict the processing of user-supplied URIs to trusted sources only, implement strict allowlists for destination hosts (preferably IP-based rather than hostname-based), and apply egress filtering to prevent server-initiated connections to internal networks or cloud metadata services. Workaround: There is no mitigation available for this issue. Apply updates as they become available from Red Hat product teams. Workaround: Ensure that the configured publicPath always ends with a trailing slash (e.g., '/assets/'), or utilize the default setting ('auto'), which resolves to '/' and is unmitigated by default. Alternatively, avoid backing the middleware with a physical filesystem (writeToDisk: false). Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. For additional information, refer to the upstream advisory at https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3wxw-xv34-2frg. Workaround: Restrict request payload sizes or maximum form field counts at an upstream web application firewall (WAF) or reverse proxy layer before HTTP requests reach the Tornado application worker. Workaround: To mitigate this flaw through configuration: 1. Configure trusted proxy definitions using standard IPv4 notation (such as `10.0.0.0/8`) rather than IPv4-mapped IPv6 notation. 2. If IPv4-mapped IPv6 notation is required, set the subnet prefix length to at least 97 to cover the mapped boundary (for example, specify `::ffff:10.0.0.0/104` instead of `::ffff:10.0.0.0/8`). 3. Alternatively, sanitize or strip incoming `X-Forwarded-For` headers at edge load balancers or boundary reverse proxies before passing traffic to backend applications. Warning: Modifying application configuration files requires restarting the Node.js application service, which will temporarily interrupt service availability and active connections. Workaround: To mitigate this vulnerability, ensure that any input strings processed by the `Joi.string().isoDate()` validation rule are capped in length before being passed to the 'joi' package. This can prevent the regular expression engine from consuming excessive resources and causing a denial of service. Workaround: When extracting archives from untrusted sources with adm-zip, do not enable the keepOriginalPermission option in extractAllTo()/extractEntryTo(); the vulnerable permission-preservation behavior is only invoked when this option is enabled. The upstream project has released a version that filters the setuid/setgid bits from extracted permission metadata, so updating adm-zip to a…

🔗 References (111)