RHSA-2026:29770HighCVSS 8.1
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
🔗 CVE IDs covered (3)
📋 Description
CVE-2026-42154 — github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42211 — react-router: React Router: Remote Code Execution via prototype pollution in Framework Mode CVE-2026-47262 — github.com/containerd/containerd: containerd: Denial of Service via maliciously crafted image leading to unbounded group parsing
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2026:29770
- externalhttps://images.redhat.com/
- externalhttps://access.redhat.com/security/cve/CVE-2026-42154
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://access.redhat.com/security/cve/CVE-2026-47262
- externalhttps://access.redhat.com/security/cve/CVE-2026-42211
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29770.json