Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Red Hat Hardened Images: Unpatched Software Exposes System to Attack

published 4 months ago

Summary

Red Hat Hardened Images may contain unpatched software, leaving systems open to exploitation by attackers. This affects users who rely on these images for secure operations. Users should update their images to the latest version to ensure they have the latest security patches.

What to do

Update redhat nodejs26 to version 0:26.4.0-1.3.hum1.
Update redhat nodejs26-bin to version 0:26.4.0-1.3.hum1.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:hummingbird:1	redhat	nodejs26	< 0:26.4.0-1.3.hum1 Fix: upgrade to 0:26.4.0-1.3.hum1
Red Hat:hummingbird:1	redhat	nodejs26-bin	< 0:26.4.0-1.3.hum1 Fix: upgrade to 0:26.4.0-1.3.hum1

Original advisory text

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

References

https://access.redhat.com/errata/RHSA-2026:33866 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-13149 Third Party Advisory
https://access.redhat.com/security/updates/classification/ Third Party Advisory
https://images.redhat.com/ Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_33866.... Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2494813 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-13149 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-13149 Vendor Advisory
https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c11672084... Third Party Advisory
https://www.npmjs.com/package/brace-expansion Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Timeline

Published1 Jul 2026

Updated1 Jul 2026

First seen1 Jul 2026

Sources

RHSA-2026:33866 · OSV

Track software like this

Free during beta