Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

CVE-2026-93450 — github.com/go-openapi/swag: go-openapi/swag: Denial of Service via uncontrolled JSON recursion CVE-2026-101898 — axios: axios: Security control bypass via unapplied HTTP/2 proxy and DNS settings CVE-2026-101900 — axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapter CVE-2026-101901 — axios: Axios: Denial of Service via unhandled error in HTTP/2 session initialization CVE-2026-101902 — axios: axios: Unintended HTTP method override via prototype pollution gadget CVE-2026-101903 — axios: Axios: Denial of Service via malformed data URLs CVE-2026-101904 — axios: Axios: HTTP header injection via inherited prototype properties CVE-2026-101905 — axios: axios: Request socket hijacking via inherited createConnection property CVE-2026-101906 — axios: axios: Denial of Service via crafted redirect hostname CVE-2026-101907 — axios: Axios: Server-Side Request Forgery via bypassed redirect restrictions in fetch adapter CVE-2026-101908 — axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollution CVE-2026-101909 — axios: axios: Denial of Service via prototype pollution gadget in form serialization