Vulnerabilities of Red Hat Red Hat Hardened Images
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-48818 | Starlette is a lightweight ASGI framework/toolkit | 7.5 High | Jun 17, 2026 |
| CVE-2026-9697 | Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or… | 7.4 High | Jun 17, 2026 |
| CVE-2026-6734 | Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying… | 7.5 High | Jun 17, 2026 |
| CVE-2026-12151 | Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but… | 7.5 High | Jun 17, 2026 |
| CVE-2026-12515 | A flaw was found in Katello's of Red Hat Satellite | 4.3 Medium | Jun 17, 2026 |
| CVE-2026-42055 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules | 8.1 High | Jun 17, 2026 |
| CVE-2026-42530 | NGINX Open Source has a vulnerability in the ngx_http_v3_module module | 8.1 High | Jun 17, 2026 |
| CVE-2026-48779 | ws is an open source WebSocket client and server for Node.js | 7.5 High | Jun 16, 2026 |
| CVE-2026-4367 | Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing | 5.5 Medium | Jun 16, 2026 |
| CVE-2026-42014 | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | 6.6 Medium | Jun 16, 2026 |
| CVE-2026-44990 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer… | 9.3 Critical | Jun 12, 2026 |
| CVE-2026-12143 | form-data is a library for creating readable multipart/form-data streams | 8.7 High | Jun 12, 2026 |
| CVE-2026-48165 | MariaDB server is a community developed fork of MySQL server | 8.0 High | Jun 12, 2026 |
| CVE-2026-48163 | MariaDB server is a community developed fork of MySQL server | 8.0 High | Jun 12, 2026 |
| CVE-2026-44173 | MariaDB server is a community developed fork of MySQL server | 5.0 Medium | Jun 12, 2026 |
| CVE-2026-44172 | MariaDB server is a community developed fork of MySQL server | 6.9 Medium | Jun 12, 2026 |
| CVE-2026-44168 | MariaDB server is a community developed fork of MySQL server | 8.0 High | Jun 12, 2026 |
| CVE-2026-44170 | MariaDB server is a community developed fork of MySQL server | 6.3 Medium | Jun 12, 2026 |
| CVE-2026-47162 | Vim is an open source, command line text editor | 7.3 High | Jun 11, 2026 |
| CVE-2026-49261 | MariaDB server is a community developed fork of MySQL server | 10.0 Critical | Jun 11, 2026 |
| CVE-2026-11850 | Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read | 5.0 Medium | Jun 11, 2026 |
| CVE-2026-6893 | A flaw was found in dracut | 7.5 High | Jun 10, 2026 |
| CVE-2026-45591 | Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network | 7.5 High | Jun 9, 2026 |
| CVE-2026-45490 | Improper authorization in .NET allows an authorized attacker to elevate privileges locally | 7.8 High | Jun 9, 2026 |
| CVE-2026-45447 | Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7… | Not rated | Jun 9, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433