RHSA-2026:37577HighCVSS 7.5
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
🔗 CVE IDs covered (3)
📋 Description
CVE-2026-39245 — decompress: decompress: path traversal via indexOf containment bypass allows arbitrary file write (bypass of CVE-2020-12265 fix) CVE-2026-59725 — socket.io: engine.io: Socket.IO: Denial of Service via invalid binary POST requests CVE-2026-59869 — js-yaml: js-yaml: Denial of Service via crafted YAML documents
🔗 References (9)
- selfhttps://access.redhat.com/errata/RHSA-2026:37577
- externalhttps://access.redhat.com/security/cve/CVE-2026-59725
- externalhttps://access.redhat.com/security/cve/CVE-2026-59869
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://images.redhat.com/
- externalhttps://access.redhat.com/security/cve/CVE-2026-39243
- externalhttps://access.redhat.com/security/cve/CVE-2026-39245
- externalhttps://access.redhat.com/security/cve/CVE-2020-12265
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37577.json