Red Hat Linux Security Advisories & CVEs
6057 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Red Hat release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Red Hat advisories
Medium [CVE-2026-59924] Information disclosure via crafted include paths
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Include.parse() joins and normalizes user-supplied include paths without verifying that the result remains within the intended markdown directory, allowing crafted include paths to access files outside that directory when markdown files are processed using md.read(). This issue is fixed in version 3.3.0. This can lead to information disclosure when markdown files are processed. This Moderate impact flaw in Mistune, a Python Markdown parser, allows for information disclosure. When processing specially crafted markdown files, an attacker can exploit improper path verification in the `Include.parse()` function to access files outside the intended markdown directory. Red Hat severity: Moderate — CVSS 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-22. Affected Red Hat products: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-59929] Cross-site scripting via incomplete URL scheme filtering
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the safe_url filter in src/mistune/renderers/html.py blocks only javascript:, vbscript:, file:, and data: schemes, allowing legacy or chained schemes such as feed:, view-source:, jar:, livescript:, mocha:, ms-its:, mk:, and res: to reach rendered href and src attributes and potentially execute script in affected user agents. This issue is fixed in version 3.3.0. The `safe_url` filter, intended to prevent malicious Uniform Resource Locators (URLs), did not adequately block all potentially harmful schemes. This oversight allows an attacker to embed specially crafted URLs using legacy or chained schemes within rendered HTML attributes. Consequently, a remote attacker could exploit this to execute arbitrary script code in a user's browser, leading to a Cross-Site Scripting (XSS) vulnerability. This Moderate-impact flaw in Mistune, a Python Markdown parser, allows for Cross-Site Scripting (XSS) due to insufficient filtering of URL schemes. Exploitation requires a user to process specially crafted Markdown content, which could lead to arbitrary script execution in the user browser. Red Hat products that utilize Mistune to render untrusted Markdown input are susceptible to this vulnerability. Red Hat severity: Moderate — CVSS 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Weakness: CWE-79.
Medium [CVE-2025-3110] HTTP request smuggling via bare line-feed sequences in HTTP headers
OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy The issue stems from the server accepting unstandardized bare line-feed sequences in HTTP headers. Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N). Weakness: CWE-444.
Medium [CVE-2026-59925] Denial of Service via crafted Markdown input
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a character cause quadratic work in src/mistune/inline_parser.py because the parser scans forward for matching close markers from every potential opening run, allowing denial of service in default Mistune parsing. This issue is fixed in version 3.3.0. An attacker can exploit this vulnerability by providing specially crafted Markdown input containing long sequences of emphasis pairs. This can cause the parser to perform excessive computational work, leading to a denial of service (DoS) condition in the default Mistune parsing. This can lead to resource exhaustion and service unavailability in applications utilizing Mistune, where user-controlled Markdown input is processed. Red Hat assigns PR:L in the product-specific CVSS base score because delivering the crafted Markdown document to Mistune requires authenticated access in affected products; platform login and RBAC prevent unauthenticated remote submission in default deployments. The upstream PR:N score assumes any Internet-facing application parsing untrusted Markdown without authentication. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-1333.
Medium [CVE-2026-59926] Cross-Site Scripting via unescaped HTML class attribute in Admonition directive
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, render_admonition() in src/mistune/directives/admonition.py concatenates the Admonition directive:class: option into the HTML class attribute without escaping, allowing attribute injection and cross-site scripting even when HTMLRenderer escape mode is enabled. This issue is fixed in version 3.2.1. A remote attacker could exploit this by providing specially crafted input, leading to the execution of arbitrary script code in the user's browser. This Moderate flaw in the Mistune Markdown parser allows for Cross-Site Scripting (XSS) due to improper sanitization of user-controlled input within the Admonition directive's class attribute. This vulnerability requires user interaction with malicious content for successful exploitation. Red Hat severity: Moderate — CVSS 5.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N). Weakness: CWE-79. Affected Red Hat products: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4. Under investigation: Red Hat Satellite 6. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-59923] Arbitrary code execution through crafted Markdown links
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, HTMLRenderer.safe_url() does not block percent-encoded javascript URIs, allowing attacker-supplied Markdown links or images to bypass URL protections and execute script in rendered HTML. This issue is fixed in version 3.3.0. This can lead to the execution of arbitrary scripts in the rendered HTML, potentially compromising the user's system. Red Hat products ship python-mistune in both the older 0.8.x series and newer 3.x series. The URL sanitization bypass applies to both versions: the 0.8.x escape_link() function and the 3.x safe_url() function both fail to decode percent-encoded characters before checking for dangerous URI schemes. Exploitation requires an attacker who can inject Markdown content into an application that renders it with mistune, and a victim who clicks the malicious link. This limits the exposure. Red Hat severity: Moderate — CVSS 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Weakness: CWE-79. Affected Red Hat products: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4. Red Hat lists Red Hat Satellite 6 as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-59930] Same-page navigation redirection due to predictable heading IDs
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, the toc plugin and TableOfContents directive generate heading IDs as predictable toc_N values without slugifying the heading text, allowing attacker-controlled id="toc_N" content to collide with generated anchors and redirect same-page navigation, CSS selectors, or JavaScript handlers. This issue is fixed in version 3.3.0. This could lead to unexpected behavior or information disclosure within the application. This flaw has a Moderate impact on Red Hat products that ship mistune 3.x with the toc plugin. Exploitation requires the attacker to submit Markdown content to a multi-author rendering context where toc is enabled, limiting the practical attack surface. Red Hat severity: Moderate — CVSS 4.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N). Weakness: CWE-79. Affected Red Hat products: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI); Red Hat Satellite 6. Red Hat lists Red Hat OpenShift Container Platform 4 as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-59922] Denial of Service via crafted input
Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0. A remote attacker could exploit this vulnerability by providing specially crafted input containing specific marker pairs (tilde, equals-sign, or caret). This crafted input causes the parser to perform quadratic work, leading to excessive CPU consumption. This can result in a denial of service (DoS) for the affected system. This Moderate flaw in the Mistune Python Markdown parser can lead to a denial of service. This vulnerability primarily affects Red Hat products where the strikethrough, mark, or insert plugins are explicitly enabled, as these are not part of Mistune's default configuration. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Weakness: CWE-1333. Affected Red Hat products: Migration Toolkit for Applications 8; Red Hat OpenShift AI (RHOAI); Red Hat OpenShift Container Platform 4. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-29007] Out-of-bounds read leads to denial of service via crafted TCP packets
U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcp_rx_state_machine() (net/tcp.c) when CONFIG_PROT_TCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafting a malicious packet with a mismatched IP total length and TCP data offset field. Attackers can send a packet with an IP total length of 40 bytes and a TCP data offset claiming 60 bytes of header to cause tcp_parse_options() to read 40 bytes past the end of the TCP segment, potentially corrupting connection state variables such as rmt_win_scale and rmt_timestamp to disrupt TCP window calculations. A flaw was found in U-Boot. A remote attacker can exploit an out-of-bounds read vulnerability in the `tcp_rx_state_machine()` function when the Transmission Control Protocol (TCP) is enabled. Red Hat ships U-Boot tools and related Python utility packages in Fedora and EPEL community repositories. The vulnerable code is in U-Boot's TCP state machine (tcp_rx_state_machine in net/tcp.c) and requires CONFIG_PROT_TCP to be enabled at compile time. This vulnerability does not affect any Red Hat product — only community packages. Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Weakness: CWE-125.
Medium [CVE-2026-59895] Arbitrary markup injection via improper handling of class names in server-side rendering.
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.0.0 before 4.12.27, cx() in hono/css composes class names from plain strings but marks the result as already escaped without HTML-escaping the input, allowing untrusted className values used in a JSX class attribute during server-side rendering to break out of the attribute and inject arbitrary markup. This issue is fixed in version 4.12.27. This could result in Cross-Site Scripting (XSS) attacks, where malicious scripts can be executed in a user's browser. Red Hat severity: Moderate — CVSS 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Weakness: CWE-79. Affected Red Hat products: Migration Toolkit for Applications 8; Red Hat Ansible Automation Platform 2; Red Hat Developer Hub; Red Hat OpenShift Dev Spaces. Red Hat lists Red Hat Hardened Images as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-59896] Information disclosure due to improper context isolation in server-side rendering
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx did not isolate context values per request during server-side rendering, allowing createContext, useContext, jsxRenderer, or useRequestContext data from a different in-flight request to be used after an await in an async component. This issue is fixed in version 4.12.27. This could lead to information disclosure. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N). Weakness: CWE-653. Affected Red Hat products: Red Hat Ansible Automation Platform 2; Red Hat Developer Hub; Red Hat OpenShift Dev Spaces. Red Hat lists Migration Toolkit for Applications 8; Red Hat Hardened Images as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-59897] Information disclosure due to incorrect header de-duplication in AWS API Gateway v1 adapter
Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware or application logic that depends on the complete X-Forwarded-For chain, rate limiting, audit logging, or proxy-chain validation can receive incomplete data. This issue is fixed in version 4.12.27. Consequently, this could result in information disclosure or the bypass of security controls. Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N). Weakness: CWE-1289. Affected Red Hat products: Migration Toolkit for Applications 8; Red Hat Ansible Automation Platform 2; Red Hat Developer Hub; Red Hat OpenShift Dev Spaces. Red Hat lists Red Hat Hardened Images as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-59890] MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD)
setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursive-exclude, and prune directives by matching compiled glob patterns against on-disk file names without Unicode normalization, so on macOS APFS or HFS+ an NFD file name could bypass an NFC exclusion rule and be packed into a source distribution. This issue is fixed in version 83.0.0. A flaw was found in setuptools, a Python package management tool. The FileList component, responsible for handling file exclusions, did not properly normalize Unicode file names when applying exclusion rules. As a result, sensitive files that should have been excluded could be inadvertently included in a source distribution, leading to information disclosure. Red Hat severity: Moderate — CVSS 6.1 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N). Weakness: CWE-1025. Affected Red Hat products: Red Hat Hardened Images.
Medium [CVE-2026-59883] Cross-host cookie disclosure and injection due to improper domain matching in CookieJar.
Guzzle is an extensible PHP HTTP client. Prior to 7.12.3, CookieJar did not restrict cookies scoped to IP-address or bare-numeric Domain values to the exact host that set them, because SetCookie::matchesDomain() applied ordinary suffix matching to domains such as 192.168.0.1, [::1], or 1, allowing cross-host cookie disclosure, cookie injection, or session fixation. This issue is fixed in version 7.12.3. This vulnerability could allow a remote attacker to disclose cookies across different hosts, inject malicious cookies, or fixate user sessions, potentially leading to unauthorized access or session hijacking. Red Hat's products are not affected by this flaw because the guzzlehttp/guzzle PHP library is not shipped in any Red Hat product. Red Hat severity: Moderate — CVSS 4.7 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N). Weakness: CWE-472.
Medium [CVE-2026-42505] Go crypto/tls: Information disclosure in Encrypted Client Hello
Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. A flaw was found in the `crypto/tls` package in Go. The vulnerability stems from the unintentional exposure of pre-shared key identities within the unencrypted client hello, potentially enabling an attacker to link previously anonymous connections. This primarily affects the privacy of communications rather than integrity or availability. Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). Weakness: CWE-201. Affected products named by the advisory: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Hardened Images; and 54 more. Affected products named by the advisory: Red Hat OpenShift distributed tracing 3.10.2; Assisted Installer for Red Hat OpenShift Container Platform 2; Builds for Red Hat OpenShift; cert-manager Operator for Red Hat OpenShift; and 50 more.
Medium [CVE-2026-59262] Information disclosure via histories GraphQL field
AFFiNE's histories GraphQL field fails to validate Doc.Read permission before exposing document edit history, allowing authenticated workspace members to retrieve restricted content timelines. Attackers can supply arbitrary document GUIDs to access full edit histories including user names, emails, and timestamps of private pages they lack access to. A flaw was found in AFFiNE. This vulnerability allows an authenticated workspace member to bypass document read permissions by supplying arbitrary document Globally Unique Identifiers (GUIDs) to the histories GraphQL field. This Moderate impact information disclosure flaw in AFFiNE allows authenticated workspace members to bypass document read permissions. This issue primarily affects deployments of AFFiNE and does not directly impact Red Hat products. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Weakness: CWE-639. Red Hat lists Red Hat AI Inference Server; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat OpenShift AI (RHOAI) as not affected.
Medium [CVE-2026-59876] Prototype pollution vulnerability in Text Format extension
protobufjs compiles protobuf definitions into JavaScript (JS) functions. From 8.2.0 until 8.6.5, the protobufjs Text Format extension parsed string-keyed map entries using ordinary property assignment, allowing a map entry with key __proto__ to change the prototype of the returned map object instead of creating an own map entry in protobufjs/ext/textformat. This issue is fixed in version 8.6.5. A flaw was found in protobufjs. An attacker could exploit this to alter object behavior, potentially leading to information disclosure or other impacts. This Moderate-impact flaw in protobufjs allows an attacker to perform prototype pollution by providing specially crafted input to the Text Format extension. Red Hat severity: Moderate — CVSS 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N). Weakness: CWE-915. Affected Red Hat products: Red Hat Ceph Storage 9. Red Hat lists Cryostat 4; OpenShift Pipelines; OpenShift Service Mesh 3; Red Hat Ansible Automation Platform 2; Red Hat Build of Podman Desktop; Red Hat Developer Hub; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux AI (RHEL AI) 3; Red Hat Hardened Images; Red Hat OpenShift Container Platform 4; Red Hat Openshift Data Foundation 4; Self-service automation portal 2 as not affected. Red Hat does not currently list a fixing RHSA for this CVE.
Medium [CVE-2026-59871] Denial of Service due to incorrect PAX path handling
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, node-tar coerces all-digit PAX path and linkpath values in src/pax.ts to JavaScript numbers, causing downstream path handling such as normalizeWindowsPath(entry.path).split('/') to throw an uncaught TypeError. This issue is fixed in version 7.5.18. This vulnerability occurs when the library incorrectly converts specific archive path values into numbers, leading to an error during subsequent path processing. An attacker could exploit this to cause the application using node-tar to crash, resulting in a denial of service. This Moderate severity flaw in `node-tar` can lead to a denial of service in Node.js applications that process untrusted tar archives. A specially crafted archive with an all-digit PAX path value can cause an uncaught `TypeError` during path handling, resulting in an application crash that bypasses typical error recovery mechanisms. Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Weakness: CWE-843. Affected products named by the advisory: Confidential Compute Attestation; Cryostat 4; Exploit Intelligence; Migration Toolkit for Containers; and 35 more. Affected products named by the advisory: Node HealthCheck Operator; OpenShift Pipelines; OpenShift Service Mesh 3; Red Hat 3scale API Management Platform 2; and 31 more.
Medium [CVE-2026-59875] Denial of Service via crafted archive with NUL bytes in metadata
node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.17, node-tar does not strip NUL bytes from PAX path and linkpath records in src/pax.ts, allowing a crafted archive with values to reach fs.lstat or fs.open and terminate the process with an uncaught exception. This issue is fixed in version 7.5.17. A remote attacker could craft a malicious archive containing null characters (NUL bytes) in its metadata. When this archive is processed, the unstripped null characters can cause the application to terminate unexpectedly, leading to a Denial of Service (DoS). Red Hat severity: Moderate — CVSS 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Weakness: CWE-170. Affected products named by the advisory: Confidential Compute Attestation; Cryostat 4; Exploit Intelligence; Migration Toolkit for Containers; and 35 more.
Medium [CVE-2026-54423] Arbitrary IPMI command execution via send_raw deployment step
In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy nodes using the IPMI management interface can maliciously use the send_raw step to send arbitrary IPMI commands to a node, bypassing Ironic's access control. IPMI send_raw capability is exposed multiple ways, including via VendorPassthru interfaces (restricted to system admin) and other step based flows such as cleaning or servicing. This also means any malicious user with the ability to initiate manual cleaning and servicing flows with arbitrary steps can also execute this vulnerability. The Red Hat Product Security team has assessed the severity of this vulnerability as Moderate. While the IPMI send_raw functionality lacks a blocklist in certain step-based provisioning methods, exploitation requires privileges that are not available in default configurations. The SYSTEM_OR_OWNER_MEMBER_AND_LESSEE_ADMIN policy requires explicit administrator delegation of owner or lessee capabilities, and the automatic_lessee feature defaults to false and did not function correctly in shipped versions. This capability was introduced in upstream Ironic 22.1.0, which has not been shipped in any version of Red Hat OpenStack Platform or Red Hat OpenStack Services on OpenShift.