Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.10-0.8.hum1 aarch64, x8664 grafana12.4-12.4.10-0.8.hum1.src src Security Fixes: grafana12.4: CVE-2026-9496...

ROOT-APP-NPM-CVE-2026-9496 CVE-2026-9496 in pacote - Patched by Root

Root has patched CVE-2026-9496 in the pacote package for Root:npm. Multiple fixed versions available...

CVE-2026-9496 vulnerabilities

Vulnerabilities for packages: graalvm, lerna, prism...

CVE-2026-9496 vulnerabilities

Vulnerabilities for packages: prism, lerna...

SUSE CVE-2026-9496

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service DoS via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function's regex replacement and string-manipulation...

1k-tasks (>=0.0.1, <=1.0.5), 360-lib (1.0.0) +5497 more potentially affected by CVE-2026-9496 via pacote (>=11.2.7, <=21.5.0)

pacote NPM version =11.2.7, =0.0.1, =0.1.13, =52.3.0, =4.0.0, =4.2.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.2.17 and more Source cves: CVE-2026-9496 Source advisory: OSV:GHSA-W4PP-8PJF-RMXW...

CVE-2026-9496

Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service DoS via the addGitSha function. An attacker can exploit this vulnerability by supplying a specially crafted spec.rawSpec value that triggers the function’s regex replacement and string-manipulation...

1k-tasks (>=0.0.1, <=1.0.5), 360-lib (1.0.0) +5497 more potentially affected by CVE-2026-9496 via pacote (>=11.2.7, <=21.5.0)

pacote NPM version =11.2.7, =0.0.1, =0.1.13, =52.3.0, =4.0.0, =4.2.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.2.17 and more Source cves: CVE-2026-9496 Source advisory: MEND:CVE-2026-9496...

1k-tasks (>=0.0.1, <=1.0.5), 360-lib (1.0.0) +5497 more potentially affected by CVE-2026-9496 via pacote (>=11.2.7, <=21.5.0)

pacote NPM version =11.2.7, =0.0.1, =0.1.13, =52.3.0, =4.0.0, =4.2.0, =0.0.3, =0.0.3, =1.1.0, =1.0.12, =1.0.14, =1.0.21, =1.2.17 and more Source cves: CVE-2026-9496 Source advisory: SNYK:JS-PACOTE-8225084...